MALICIOUS (1) campaign cataloged at 2024-07-24(2).

1. The campaign has clearly malicious intent, like infostealers.
2. This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.

2024-07-blazesquad

Abuse categories

Campaign uses .

exfiltration_generic

Campaign uses exfiltration_generic.

infostealer

Activity is typical for information stealers, i.e. by exfiltrate various sensitive data from the victim's environment.

References

Referenced resources may include blog posts about the campaign, malware analysis, sandbox reports, or other relevant information.

• https://github.com/BlazeSquad666/blazestealer

IoCs & related URLs

URLs with payloads, characteristic domains, C&C IPs, repositories with malicious code, etc.

• hxxps://github.com/BlazeSquad666/discord-injection/blob/main/injection.js

• hxxps://filetransfer.io/data-package/c4MTYWw8/download

Packages in the campaign

campaign:2024-07-blazesquad

• pybanners