#DYEPACK.FOX

Malware/Tool

2018-10-03 • APT38 Un-usual Suspects

A DYEPACK variant used by APT38 to remove fraudulent SWIFT transaction traces from PDF records viewed with Foxit Reader.

Tagged Reports

2019-01-29
MITRE
#G0082 #APT38 #T1562 #T1543 #T1106 #T1027 #T1071 #T1057 #T1056 #T1082 #T1566 #T1529 #T1485 #T1135 #T1049 #T1218 #T1005 #T1518 #T1505 #T1561 #T1105 #T1588 #T1565 #T1115 #T1070 #T1112 #T1083 #T1053 #T1486 #T1189 #T1569 #T1033 #T1110 #T1204 #T1059 #T1217 #QUICKRIDE #KEYLIME #NACHOCHEESE #DYEPACK #DYEPACK.FOX #BOOTWRECK #CLOSESHAVE #Nestegg #CLEANTOAD #Mimikatz #MAPMAKER
2018-10-03
Fireeye
#APT38 #NACHOCHEESE #KEYLIME #QUICKRIDE #ActiveX #SWIFT #CVE-2015-8651 #CVE-2016-1019 #CVE-2016-4119 #BLINDTOAD #BOOTWRECK #CHEESETRAY #CLEANTOAD #CLOSESHAVE #DarkComet #DYEPACK #DYEPACK.FOX #HOTWAX #JspSpy #MAPMAKER #Mimikatz #Nestegg #QUICKCAFE #QUICKRIDE.POWER #RAWHIDE #REDSHAWL #SCRUBBRUSH #SHADYCAT #SLIMDOWN #SMOOTHRIDE #SORRYBRUTE #TightVNC #VMProtect #WHITEOUT #WORMHOLE
« Back