EmpireDNSAgent
Description
(Group-IB) The attacks involved a new tool, which is downloaded by the main Trojan Silence.Main and based on the EmpireProject and dnscat2 open source projects for penetration testing. Group-IB dubbed the tool EmpireDNSAgent or EDA.
Names
| Name |
|---|
| EmpireDNSAgent |
| EDA |
Category
Malware
Type
- Backdoor
- Tunneling
Information
Other Information
Uuid
53de6583-3773-4838-bd45-451c97831322
Last Card Change
2020-04-20