PowerBrace
Description
(IBM) PowerBrace is a PowerShell backdoor that supports multiple commands such as command execution, uploading/downloading files, etc. Most of the function names and variable names in PowerBrace have been replaced with MD5 hashes to make the analysis more difficult. Furthermore, many commands are Based64 encoded. It generates a random string as a session key, which is used in communication.
Names
| Name |
|---|
| PowerBrace |
Category
Malware
Type
- Backdoor
- Exfiltration
Information
Malpedia
Alienvault Otx
Other Information
Uuid
1530863f-0139-4bd1-af9f-fc77f2df36a2
Last Card Change
2021-04-24