SYMBOLCOMMON_NAMEaka. SYNONYMS
win.sugardump (Back to overview)

SUGARDUMP

According to Mandiant, SUGARDUMP is a credential harvesting utility, capable of password collection from Chromium-based browsers. There are also versions to exfiltrate data via SMTP and HTTP.

References
2022-08-17 ⋅ Mandiant ⋅ Mandiant Israel Research Team
Suspected Iranian Actor Targeting Israeli Shipping, Healthcare, Government and Energy Sectors
NorthStar SUGARDUMP SUGARRUSH UNC3890

There is no Yara-Signature yet.