Skip to content

Malware

BHunt

BHunt collects the crypto wallets of its victims.

BHunt is a Windows malware family.

Background

BHunt harvests cryptocurrency wallets from infected machines. It is built from a number of modules, including a reporting component that signals back to the C2 server when crypto wallets are found on a target. The malware hunts for a broad set of currencies such as Atomic, Bitcoin, Electrum, Ethereum, Exodus, Jaxx and Litecoin. Wallet theft is handled by the Blackjack module, while Sweet_Bonanza lifts browser-stored passwords; further modules named Golden7 and Chaos_crew are also present.


Source: Malpedia (Fraunhofer FKIE).