MalwareBazaar Database
This page shows some basic information the YARA rule MAL_Win_DesktopStreamClient including corresponding malware samples.
Database Entry
| YARA Rule: | MAL_Win_DesktopStreamClient |
|---|---|
| Author: | anonymous |
| Description: | DesktopStreamClient hVNC/stealer module of the Lold campaign: screen streaming over WebSocket/WebRTC (:8080 /ws/publisher), browser credential theft via IElevator App-Bound-Encryption bypass, exfil to :8787 /api/client/report |
| Firstseen: | 2026-10-31 18:35:18 UTC |
| Lastseen: | 2026-11-01 11:38:50 UTC |
| Sightings: | 3 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|