SideWalk
Description
(ESET) This backdoor shares multiple similarities with another backdoor used by the group: CrossWalk.
SideWalk is a modular backdoor that can dynamically load additional modules sent from its C&C server, makes use of Google Docs as a dead drop resolver, and uses Cloudflare workers as a C&C server. It can also properly handle communication behind a proxy.
Names
| Name |
|---|
| SideWalk |
| ScrambleCross |
Category
Malware
Type
- Reconnaissance
- Backdoor
Information
- https://www.welivesecurity.com/2021/08/24/sidewalk-may-be-as-dangerous-as-crosswalk/
- https://documents.trendmicro.com/assets/white_papers/wp-earth-baku-an-apt-group-targeting-indo-pacific-countries.pdf
- https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/grayfly-china-sidewalk-malware
Malpedia
Other Information
Uuid
7c20f5f1-cf05-4b00-b9d4-f30dae173daa
Last Card Change
2021-12-28