PowHeartBeat

Description

(ESET) PowHeartBeat is a full-featured backdoor written in PowerShell, obfuscated using various techniques such as compression, encoding, and encryption. Based on ESET telemetry, we believe PowHeartBeat replaced CLRLoad in more recent Worok campaigns as the tool used to launch PNGLoad.

Names

Name
PowHeartBeat

Category

Malware

Type

  • Backdoor

Information

Other Information

Uuid

ce37b5d7-a9c6-4348-a4f1-f23fb90f322c

Last Card Change

2022-09-13