HAPPYWORK
Description
(FireEye) HAPPYWORK is a malicious downloader that can download and execute a second-stage payload, collect system information, and beacon it to the command and control domains. The collected system information includes: computer name, user name, system manufacturer via registry, IsDebuggerPresent state, and execution path.
In November 2016, HAPPYWORK targeted government and financial targets in South Korea.
Names
| Name |
|---|
| HAPPYWORK |
Category
Malware
Type
- Downloader
- Reconnaissance
Information
Mitre Attack
Other Information
Uuid
b7302a45-e3d2-4711-a21f-7de0935de2ba
Last Card Change
2020-04-23