Crowdoor
Description
(Trend Micro) The new backdoor variant, Crowdoor, has been observed to interact with the Cobalt Strike installation, in keeping with Earth Estries’ tools, tactics, and procedures (TTPs) of cleaning up and reinstalling tools. Both instances of Crowdoor and the reinstalled Cobalt Strike were brought in as CAB files by preceding instances.
Names
| Name |
|---|
| Crowdoor |
Category
Malware
Type
- Backdoor
Information
Other Information
Uuid
3fdda153-4916-40a6-b401-5c6d9fe7991d
Last Card Change
2024-12-26