LIGHTRAIL
Description
(Mandiant) LIGHTRAIL has several connections to MINIBIKE and MINIBUS in the form of (1) a shared code base, (2) Azure C2 infrastructure with similar patterns and naming, and (3) overlapping targets and victimology.
LIGHTRAIL communicates with an Azure C2 subdomain of the form [.][.]cloudapp[.]azure[.]com. Mandiant assesses with medium confidence that both LIGHTRAIL and MINIBIKE were used to target the same victim environment at least once.
Names
| Name |
|---|
| LIGHTRAIL |
Category
Malware
Type
- Tunneling
Information
Malpedia
Other Information
Uuid
ab879427-d09c-453f-8f4b-62ba1f887f5b
Last Card Change
2024-12-29