Skip to content

Infostealer

Stealer0x3401

According to PTSecurity, this stealer harvests system information which is then RC4 encrypted and Base64 encoded before sending it to the C2 server.

Stealer0x3401 is a Windows infostealer operated by APT31.

Background

PTSecurity reports that this stealer collects system information, then RC4-encrypts and Base64-encodes it before transmitting it to the C2 server.


Source: Malpedia (Fraunhofer FKIE).