Blockchain dead drop C2
Named by 2 kept items in this workspace.
Search every workspace for Blockchain dead drop C2. It matches the name as written, so it can find other things that share it.
The items that name it 2
Malware retrieves and writes data to an Ethereum smart contract on Arbitrum Sepolia testnet (address 0xAD02b5cDE693529d3bdA0266299501ad0193036C) for bidirectional encrypted C2, polling every 3 seconds
Loader resolves its second stage from dead-drops on TRON, Aptos, and BNB Smart Chain, decrypts with embedded XOR keys, and executes via eval().
All techniques in this workspace.