PINEGROVE
Description
(Mandiant) During the intrusion, Mandiant observed APT41 leveraging PINEGROVE for their data exfiltration. PINEGROVE is a command-line uploader written in Go with functionality to collect and upload a file to OneDrive via the OneDrive API. PINEGROVE expects an authentication JSON file including relevant OneDrive credentials and the target file to upload.
Names
| Name |
|---|
| PINEGROVE |
Category
Malware
Type
- Exfiltration
Information
Malpedia
Other Information
Uuid
009cf2c1-7f43-4b26-abc4-38836a7f0309
Last Card Change
2024-12-27