Baldeagle Stealer

Desktop Screenshot: Capture screenshots of the system desktop

Anti-analysis: Bypass analysis tools such as virtual machines, sandboxes, debuggers, VirusTotal, and Any.Run

System Information: Retrieve information including version, CPU, GPU, RAM, IP address, BSSID, location, screen resolution, and installed applications

Chromium Browser: Extract passwords, credit card information, cookies, browsing history, and autofill data

Internet Explorer/Edge Browser: Extract password information

Wi-Fi Networks: Retrieve saved Wr-Fi networks and scan networks around the device, including SSID and BSSID

File Extraction: Capture Documents, images, source code, databases, and files from usb

Banking and Cryptocurrency Detection: Detect banking and cryptocurrency services in browsers

Keylogger and Clipboard Listener: Monitor and record keyboard inputs and clipboard content

OpenVPN Support: Support for openvpn Fucntionality

Cryptocurrency Wallets: Support for various cryptocurrency wallets such as Zcash, Armory, Bytecoin, Jaxx Exodus, etc.

Cryptocurrency Wallet Extensions: Support for cryptocurrency wallets extensions in Chrome and Edge browsers, such as Binance, Metamask, etc.

Instant Messaging Sessions, Accounts, and Tokens: Support for session, account and token information in applications like Telegram, ICQ Skype, Pidgin, Outlook etc.

Directory Structure: Provide information about the system’s directory structure

Filezilla Host List: Retrieve Filezilla host list

Process List: Retrieve a list of running processes

Product Keys: Retrieve product keys of the system

Startup Modules: Support for startup modules

Keyboard Logger: Opens when users are messaging or using banking websites, and records keyboard inputs

Clipboard Hijacker: Opens during transactions and replaces cryptocurrency wallet addresses in the clipboard