crypto-clipper-malware-detection
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMPERSISTENCECOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [PERSISTENCE]: The skill provides functional implementation code for establishing persistence on Windows systems using the winreg library to create auto-start entries in the HKCU registry Run key.
- [COMMAND_EXECUTION]: The code demonstrates techniques for modifying system configuration to ensure an executable runs automatically at user login.
- [PRIVILEGE_ESCALATION]: The documentation and code describe process masquerading techniques, suggesting the use of names like rdpclip to impersonate legitimate system processes and evade basic detection by users and security tools.
- [COMMAND_EXECUTION]: The skill provides patterns for high-frequency clipboard monitoring using the pyperclip library to identify and replace cryptocurrency addresses in the system clipboard.
Audit Metadata