内容仅以原始语言提供
class="post-article">

ClipboardClipper

PE32 clipboard hijacker. AddClipboardFormatListener API for clipboard monitoring. Crypto address swapping (Bitcoin/ETH/TRC20). High entropy (7.703) packed payload. Suspicious DOS stub. TLS directory. Console application.

威胁档案
类型 Infostealer
编程语言C/C++
C2协议Local
首次发现2024
目标 Küresel
用途 / 能力
  • Crypto Address Clipboard Swap
尚未发现该家族的 C2 服务器。

研究报告 (1)

Orta

ClipboardClipper 52d0af7d -- AddClipboardFormatListener Pano Dinleme Kancasi, PE32 Console x86 1.8MB Yuksek Entropi Packed, DOS Stub Suspicious TLS Anti-Analiz | Orta

ClipboardClipper 52d0af7d PE32 console x86 1.8MB entropi 7.70 packed. AddClipboardFormatListener pano dinleme. DOS stub suspicious TLS anti-analiz. Kripto adres clipper.

阅读报告 →