Adzok
Description
(Citizen Lab) Similar to Adwind in functionality, the java-based Adzok is apparently from Bolivia. The premium version costs $990, but it appears that Packrat is using the “free” version. This version of Adzok does not use obfuscation, which makes it possible to simply uncompress the jar files within the docx and read the clear-text configuration file. Given the obfuscated nature of the other RATs that Packrat has used, their use of Adzok is surprising. It is possible that they were having stability, compatibility, or detection problems with other RATs and that Adzok served a specific requirement.
Names
| Name |
|---|
| Adzok |
| Invisible Remote Administrator |
Category
Tools
Type
- Reconnaissance
- Backdoor
- Credential stealer
- Info stealer
- Exfiltration
Information
Malpedia
Other Information
Uuid
cc7e8c06-7e44-4441-9fe0-5479cdb262fa
Last Card Change
2021-04-24