Infostealer
XehookStealer
Xehook is a .NET-based malware targeting Windows systems.
XehookStealer is a Windows infostealer.
Background
Xehook is a .NET-based malware that targets Windows machines. It harvests information from Chromium and Gecko browsers and provides support for more than 110 cryptocurrencies as well as 2FA extensions. CRIL identified a possible connection between Xehook Stealer, Agniane, and the Cinoshi project, pointing to an evolution from a free MaaS offering toward the creation of Xehook Stealer. SmokeLoader binaries were observed to be a frequent delivery mechanism for Xehook Stealer. The code overlaps between Xehook Stealer and Agniane Stealer further point to an evolutionary link between them.
Source: Malpedia (Fraunhofer FKIE).