Getting user name and password from keylogger

[malware]

Reverse engineering a keylogger (Email based logger) is it possible to to get the email address and Password which is set to get key logs.

Edited October 21, 2018 by malware

[jameswoods]

Depending on how the malware operates. Alot of the time you can get the SMTP settings which will usually include a username/password

[evilcry]

Not all traffic is e-mail based, this is common for quite simple and kiddish keyloggers.
Usually keystrokes are sent to a C&C over HTTPS.

[p4r4d0x]

  On 10/22/2018 at 3:45 PM, evilcry said:

Not all traffic is e-mail based, this is common for quite simple and kiddish keyloggers.
Usually keystrokes are sent to a C&C over HTTPS.

Expand  

Any examples???

[evilcry]

  On 10/22/2018 at 11:08 PM, p4r4d0x said:

Any examples???

Expand  

APTs like Turla, RATs like darkcomet, pandora, dedicated keyloggers like bladabindi.

https://www.fortinet.com/blog/threat-research/bladabindi-remains-a-constant-threat-by-using-dynamic-dns-services.html
https://0ffset.wordpress.com/2018/10/05/post-0x17-2-turla-keylogger/

[MichaelD]

  On 10/22/2018 at 11:08 PM, p4r4d0x said:

Any examples???

Expand  

Add Virobot malware, Ventir trojan etc

[p4r4d0x]

Thanks guys!