Sqlextractor
Description
(Palo Alto) The attackers used a custom tool they named sqlextractor (binary name sql.net4.exe). Its purpose is to query SQL databases and extract sensitive PII data, such as the following: • ID numbers • Passport scans • Emails • Full addresses
Names
Name |
---|
Sqlextractor |
Category
Malware
Type
- Info stealer
Information
Other Information
Uuid
c9f0e5cc-aa04-449a-a8cf-27fe280be3b7
Last Card Change
2023-11-29