StealthFalcon
Description
(ESET) The Win32/StealthFalcon backdoor, which appears to have been created in 2015, allows the attacker to control the compromised computer remotely. We have seen a small number of targets in UAE, Saudi Arabia, Thailand, and the Netherlands; in the latter case, the target was a diplomatic mission of a Middle Eastern country. How the backdoor was distributed and executed on the target systems is beyond the scope of this investigation; our analysis focuses on its capabilities and its C&C communication.
Names
| Name |
|---|
| StealthFalcon |
Category
Malware
Type
- Backdoor
- Exfiltration
Information
Other Information
Uuid
d7447c4a-46ca-402a-8b8a-6a572e2983f0
Last Card Change
2020-04-20