⚠
Allcome
clipper1 mutex signatures
[BASIC_INFORMATION]
FAMILY_NAME:
Allcome
CATEGORY:
CLIPPER
DESCRIPTION:
Allcome is a cryptocurrency clipper malware that has emerged as a newcomer in malware underground forums. The malware is designed to intercept and modify cryptocurrency addresses in the clipboard, redirecting funds to attacker-controlled wallets. It targets cryptocurrency transactions and employs sophisticated techniques to evade detection.
ALIASES:
Allcome ClipperAllcome Clipbanker
TAGS:
cryptocurrencyclipboard_hijackingaddress_manipulationwallet_targetingcrypto_theftunderground_forums
[MUTEX_SIGNATURES](1)
[MUTEX_01]
08841d-18c7-4e2d-f7e29d
ANALYST: @adhikara13 DATE: 2024-07-16
[QUICK_ACTIONS]
[THREAT_INTELLIGENCE]
ATTRIBUTION:
⚠Unknown
FIRST_OBSERVED:
2022
[SIGMA_RULE]
[STATISTICS]
MUTEX_COUNT:1
THREAT_ACTORS:1
ALIASES:2
TAGS:6
CATEGORY:CLIPPER
Malware profile loaded successfully