#HOTWAX

Malware/Tool

2018-10-03 • APT38 Un-usual Suspects

An APT38 module that decrypts a payload from a CHM file and injects it into a target process.

Tagged Reports

2018-10-03
Fireeye
#APT38 #NACHOCHEESE #KEYLIME #QUICKRIDE #ActiveX #SWIFT #CVE-2015-8651 #CVE-2016-1019 #CVE-2016-4119 #BLINDTOAD #BOOTWRECK #CHEESETRAY #CLEANTOAD #CLOSESHAVE #DarkComet #DYEPACK #DYEPACK.FOX #HOTWAX #JspSpy #MAPMAKER #Mimikatz #Nestegg #QUICKCAFE #QUICKRIDE.POWER #RAWHIDE #REDSHAWL #SCRUBBRUSH #SHADYCAT #SLIMDOWN #SMOOTHRIDE #SORRYBRUTE #TightVNC #VMProtect #WHITEOUT #WORMHOLE
« Back