Skip to content
MalwareWiki

Malware

RandomQuery

According to SentinelLabs, this is a VisualBasic-based malware that gathers system and file information and exfiltrates the data using InternetExplorer.Application or Microsoft.XMLHTTP objects.

RandomQuery is a VBScript malware family operated by Kimsuky.

Background

SentinelLabs describes this as VisualBasic-based malware that collects system and file details and ships the data out using InternetExplorer.Application or Microsoft.XMLHTTP objects.

Source: Malpedia (Fraunhofer FKIE).