DRAWSTRING
Description
(Mandiant) A downloader, which Mandiant tracks as DRAWSTRING, has some internal recon functionality. While primarily providing FIN13 the ability to download and execute arbitrary files, DRAWSTRING will also execute systeminfo.exe and upload that information to a command and control (C2) server.
Names
| Name |
|---|
| DRAWSTRING |
Category
Malware
Type
- Downloader
- Reconnaissance
- Info stealer
Information
Other Information
Uuid
aebae8ef-2707-4ad8-9173-415439e38842
Last Card Change
2021-12-26