en
DiskInfo Stealer is a CyStack research label for information-stealer traces. As of 11/10/2026, CyStack's research records 1 variant, with unknown attribution confidence.
Note: This data is provided for reference and cybersecurity research only.
CyStack recommends that users do not use this information for unlawful purposes
Original English
Unidentified Disk Capacity / Disk Free stealer observed
inside @BRADMAX aggregator packs as a sibling of Remus,
user-info bracket, Snake, Minimal, and PCInfo logs. The
System_Info.txt is a flat six-line key/value record with no
banner, no IP, no timestamp, and no CPU/GPU/display fields.
Verified victims have included Windows Defender Application
Guard sandbox VMs, suggesting heavy automated-execution
poisoning of this corpus.
Infostealer data represents only a fraction of modern data theft threats. With the Threat Intelligence component in the CyStack VulnScan solution suite, organizations can investigate each threat and credential exposure in depth, mapping C2, IOCs, and other actionable threat intelligence.
1 variant recorded for this malware
| ID | Data collected | Confidence |
|---|---|---|
3b0bf5d... | 1 | Unknown |
To see more variants, organizations should use dedicated solutions such as CyStack Threat Intelligence
User: <value>Computer: <value>OS: <value>Memory: <value>Disk Capacity: <value>Disk Free: <value>
