{
	"id": "047f8117-2580-4510-848a-9707e3524d2e",
	"created_at": "2026-04-06T00:14:35.204135Z",
	"updated_at": "2026-04-10T13:11:40.660018Z",
	"deleted_at": null,
	"sha1_hash": "b18d435e8d88c502d12fd21c975819a57fe049dd",
	"title": "malware-ioc/keydnap at master · eset/malware-ioc",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 35263,
	"plain_text": "malware-ioc/keydnap at master · eset/malware-ioc\r\nBy marc-etienne\r\nArchived: 2026-04-05 18:12:13 UTC\r\n07cd177f5baf8c1bdbbae22f1e8f03f22dfdb148\r\ninfo_list.txt\r\n2016-05-09\r\nhxxp://dev.aneros.com/media/icloudsyncd\r\n\"Most Common Interview Questions\"\r\n78ba1152ef3883e63f10c3a85cbf00f2bb305a6a\r\nscreenshot_2016-06-28-01.jpg\r\n2016-06-28\r\nhxxp://freesafesoft.com/icloudsyncd\r\nBlackHat-TDS Panel screenshot\r\n773a82343367b3d09965f6f09cc9887e7f8f01bf\r\nscreenshot.jpg\r\n2016-05-07\r\nhxxp://dev.aneros.com/media/icloudsyncd\r\nFirefox 20 about screenshot\r\ndfdb38f1e3ca88cfc8e9a2828599a8ce94eb958c\r\nCVdetails.doc\r\n2016-05-03\r\nhxxp://lovefromscratch.ca/wp-admin/css/icloudsyncd\r\nhxxp://lovefromscratch.ca/wp-admin/CVdetails.doc\r\n2739170ed195ff1b9f00c44502a21b5613d08a58\r\nCVdetails.doc\r\nhttps://github.com/eset/malware-ioc/tree/master/keydnap\r\nPage 1 of 2\n\n2016-05-03\r\nhxxp://lovefromscratch.ca/wp-admin/css/icloudsyncd\r\nhxxp://lovefromscratch.ca/wp-admin/CVdetails.doc\r\ne9d4523d9116b3190f2068b1be10229e96f21729\r\nlogo.jpg\r\n2016-06-02\r\nhxxp://dev.aneros.com/media/icloudsyncd\r\nsanelite logo\r\n7472102922f91a78268430510eced1059eef1770\r\nscreenshot_9324 2.jpg\r\n2016-06-28\r\nhxxp://freesafesoft.com/icloudsyncd\r\nSome C\u0026C panel\r\nSource: https://github.com/eset/malware-ioc/tree/master/keydnap\r\nhttps://github.com/eset/malware-ioc/tree/master/keydnap\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://github.com/eset/malware-ioc/tree/master/keydnap"
	],
	"report_names": [
		"keydnap"
	],
	"threat_actors": [],
	"ts_created_at": 1775434475,
	"ts_updated_at": 1775826700,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/b18d435e8d88c502d12fd21c975819a57fe049dd.pdf",
		"text": "https://archive.orkl.eu/b18d435e8d88c502d12fd21c975819a57fe049dd.txt",
		"img": "https://archive.orkl.eu/b18d435e8d88c502d12fd21c975819a57fe049dd.jpg"
	}
}