NewPass
Description
(Telsy) NewPass is quite a complex malware composed by different components that rely on an encoded file to pass information and configuration between each other. There are at least three components of the malware: a dropper, that deploys the binary file; a loader library, that is able to decode the binary file extracting the last component, responsible for performing specific operations, such as communicate with the attackers’ command and control server (the “agent”)
The loader and the agent share a JSON configuration resident in memory that demonstrate the potential of the malware and the ease with which the attackers can customize the implant by simply changing the configuration entries’ values.
Names
| Name |
|---|
| NewPass |
Category
Malware
Type
- Dropper
- Loader
- Backdoor
- Info stealer
- Exfiltration
Information
Malpedia
Other Information
Uuid
d41d2836-84ec-437b-8be4-f112271f88e9
Last Card Change
2021-04-24