PLAINTEE
Description
(Palo Alto) PLAINTEE is unusual in that it uses a custom UDP protocol for its network communications.
PLAINTEE will create a unique GUID via a call to CoCreateGuid() to be used as an identifier for the victim. The malware then proceeds to collect general system enumeration data about the infected machine and enters a loop where it will decode an embedded config blob and send an initial beacon to the C2 server.
Names
| Name |
|---|
| PLAINTEE |
Category
Malware
Type
- Reconnaissance
- Backdoor
Information
Mitre Attack
Malpedia
Alienvault Otx
Other Information
Uuid
4e8876cc-a6e4-4e3b-8637-e77d6363a1ad
Last Card Change
2020-04-23