JackalSteal

Description

(Kaspersky) JackalSteal is another implant usually deployed on a few compromised machines that is used to find files of interest on the target’s system and exfiltrate them to the C2 server.

This tool can be used to monitor removable USB drives, remote shares, and all logical drives in the targeted system. The malware can work as a standard process or as a service. It cannot maintain persistence, so it must be installed by another component.

Names

Name
JackalSteal

Category

Malware

Type

  • Info stealer
  • Exfiltration

Information

Other Information

Uuid

ef662f31-1298-45a0-ad9a-8c823c99edb1

Last Card Change

2023-06-21