USBCulprit
Description
(Kaspersky) One of the most notable examples in Cycldek’s toolset that demonstrates both data stealing and lateral movement capabilities is a malware we discovered and dubbed USBCulrpit. This tool, which we saw downloaded by RedCore implants in several instances, is capable of scanning various paths in victim machines, collecting documents with particular extensions and passing them on to USB drives when they are connected to the system. It can also selectively copy itself to a removable drive in the presence of a particular file, suggesting it can be spread laterally by having designated drives infected and the executable in them opened manually.
Names
| Name |
|---|
| USBCulprit |
Category
Malware
Type
- Info stealer
- Worm
Information
Malpedia
Alienvault Otx
Other Information
Uuid
2efd7c09-c2d3-4e8c-b48b-5cda7a3a80e8
Last Card Change
2021-05-15