Griffon
Description
(Kaspersky) The GRIFFON implant is a lightweight JScript validator-style implant without any persistence mechanism. The malware is designed for receiving modules to be executed in-memory and sending the results to C2s. We were able to obtain four different modules during the investigation.
Names
| Name |
|---|
| Griffon |
| Harpy |
Category
Malware
Type
- Loader
Information
- https://securelist.com/fin7-5-the-infamous-cybercrime-rig-fin7-continues-its-activities/90703/
- https://www.africacybersecurityconference.com/document/CrowdStrike_GTR_2019.pdf
Mitre Attack
Malpedia
Other Information
Uuid
5be696af-2b6d-4673-a2c4-81a80023fb67
Last Card Change
2022-12-29