KANDYKORN
Description
(Elastic) KANDYKORN is the final stage of this execution chain and possesses a full-featured set of capabilities to access and exfiltrate data from the victim’s computer. Elastic Security Labs was able to retrieve this payload from one C2 server which hadn’t been deactivated yet.
Names
| Name |
|---|
| KANDYKORN |
Category
Malware
Type
- Backdoor
- Exfiltration
Information
Malpedia
Other Information
Uuid
8664953d-3b93-4134-8936-9fdb508474f7
Last Card Change
2024-01-17