AnelMalware
- lena
- uppercut
UPPERCUT is a 32-bit HTTP-based backdoor that has been used by menuPass since at least 2017. Once thought to be exclusive to menuPass, UPPERCUT was also observed being used by menuPass-associated MirrorFace during Operation AkaiRyū.From MITRE ATT&CK
Last reported 11 months ago, by JPCERT/CC Eyes1 report
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
YAMAGoya: A Real-time Client Monitoring Tool Using Sigma and YARA Rules“rulename: "ANEL"”
Indicators in its reports
named in the reports above- hxxps://github[.]com/JPCERTCC/YAMAGoyain 1 report
- 45.32.116[.]146in 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.