Diamond Fox (also known as Gorynch) is a stealer written in Visual Basic that has been present on the black market for several years. In 2016 the malware was almost completely rewritten its recent version, called Crystal was described some months ago by Dr. Peter Stephenson from SC Media. In this first part, we will take a look at Diamond Foxs behavior in the system. We will also make a brief comparison with the old, leaked version, in order to show the evolution of this product.”]
Source: https://blog.malwarebytes.com/threat-analysis/2017/03/diamond-fox-p1/