Armorsteal Unpacked: Breaking Down a Python Malware Kit That Steals Data and Mines Crypto

Introduction As part of our ongoing malware research at Seqrite Labs, we analysed an infected Windows machine with three scheduled tasks: SysCheck2, SysCheckX and SysHeal. All three pointed to C:\Windows\SystemHealth\Update, and the machine was talking to datamons[.]org. When we opened the folder, we found a complete malware kit written in Python,... Weiterlesen: Armorsteal Unpacked: Breaking Down a Python Malware Kit That Steals D…