SIXPACK

Description

(Mandiant) SIXPACK is an ASPX web shell written in C# that functions as a tunneler. SIXPACK accepts HTTP form data that contains a remote host and TCP port to connect to, a timeout value, and Base64-encoded data to send after connecting to the specified host. Response data is read by SIXPACK and returned to the original client.

Names

Name
SIXPACK

Category

Malware

Type

  • Tunneling

Information

Other Information

Uuid

f2ed5fad-1a2b-45a2-bcf7-3cbbc5a9531c

Last Card Change

2021-12-26