MoonPeak
Description
(Talos) This a XenoRAT-based malware, which is under active development by a North Korean nexus cluster we are calling “UAT-5394.” Our analysis of infrastructure used in the campaign reveals additional links to the UAT-5394 infrastructure and new tactics, techniques and procedures (TTPs) of the threat actor.
Names
| Name |
|---|
| MoonPeak |
Category
Malware
Type
- Backdoor
Information
Malpedia
Other Information
Uuid
73a652ba-a6af-4e0c-a936-bd03af035699
Last Card Change
2024-12-27