Captures keystrokes (keylogging), browser credentials, and system metadata.
The file is an archive associated with the Boda Gitana malware , a remote access trojan (RAT) often distributed via phishing campaigns. This report details the technical characteristics, infection chain, and mitigation strategies for this threat. 🛡️ Threat Overview File Name: bodagitana.7z (sometimes seen as boda_gitana.7z ) Type: Compressed 7-Zip archive bodagitana.7z
Once run, the malware establishes persistence by modifying the Windows Registry or adding itself to the Startup folder. Captures keystrokes (keylogging)