VawtrakMalware
- grabnew
- neverquest
Last reported 5 years ago, by Huntress2 reports
ATT&CK techniques
1 technique · each with the sentence it comes from- T1021.001Remote Desktop Protocol
“Besides Cobalt Strike’s capabilities to run the Beacon stagers on remote hosts, the attackers used Remote Desktop Protocol to move laterally.”
What the reports say
2 reports, newest first · the exact sentence from each-
Malware Deep Dive“A quick Google search revealed this IP address was previously affiliated with Troj/Agent-AOZZ and the Vawtrak banking trojan.”
-
Connecting the Bots“It is known since at least 2016 for dropping Pony and Vawtrak.”
Indicators in its reports
named in the reports above- 91.234.34[.]44in 1 report
Copy this indicator · defanged
Thanks — we review every report.