C3ps59H7

1### Password Stealer ###
2# Infos
3Malware sample: https://www.virustotal.com/en/file/603258f3deae86ba4c9ebf397c42dcc5233ec6148c34a229fcf53b58bd26d0c5/analysis/
4Stolen credentials: https://www.virustotal.com/#/file/d6761d7eee3fa499a44f2fbbd0b818d9b3361bb02264927abb7333bf23b78ba1/community
5
6# List of compromised hosting mail by sample
7@tkp.kr
8@yicardio.net
9@dsacorp.net
10@sj-shipping.com
11@sunprein.co.kr
12@nate.com
13@amslighting.co.kr
14@kita.net
15@hcs77.com
16@keyang.co.kr
17@fbvalve.com
18@shc.co.kr
19@unitel.co.kr
20@hanmail.net
21@chol.com
22@hotmail.com
23@oegindia.com
24@korea-filter.co.kr
25@exporplas.pt
26@medlabse.com
27@pancaindopertiwi.com
28@dwecc.com
29@hyunbo.com
30@poczta.onet.pl
31@msn.com
32@aspe.kr
33@gov.pl
34@daum.net
35@ilshintextile.com
36@jskd.co.kr
37@hellermanntyton.co.kr
38@wisecontrol.com
39@yahoo.co.jp
40@huegatex.com.vn
41@tfbnw.net
42@kodaco.co.kr
43@unitekno.co.kr
44@kbautosys.com
45@redsvalve.com
46@kyeco.com
47@secoautomotive.com
48@ktl-cargo.co.id
49@hjncs.com
50@winners8623.com
51@kumohcorporation.co.kr
52@kiwa-industry.com.vn
53@packardkorea.co.kr
54@globaltns.com
55@ody.ca
56@imineskin.com
57@afroasiaeq.com
58@wlfoods.com
59@emko.co.kr
60@decatech.co.kr
61@wamc.com.cn
62@me.com
63@gmail.com
64@ots.co.in
65@hwbosung.com
66@3zvalve.com
67@hyojin.com
68@op.pl
69@wamc.co.kr
70@yicardionet.com
71@hcs1.com
72@kumohdc.com
73@euysung.com
74@itasco.com
75@inzi.co.kr
76@do-max.com
77@hae-song.co.kr
78@isu.co.kr
79@lincocorp.co.kr
80@idosco.com
81@fuzypro.com
82@swivalve.com
83@samwonint.com
84@ket.com
85@taurushealthcare.co.in
86@valve-korea.com
87@kjtechno.com
88@arikon.com.pl
89@naver.com
90@samwonautotech.com
91@cwmc.co.kr
92@paran.com
93@omantel.net.om
94@ierae.com