WSCSPL

Description

(Qihoo 360) A decoy document captured by QiAnXin Threat Intelligence Center is called ‘SOP for Retrieval of Mobile Data Records. Inp’ (SOP for Mobile Data Records Retrieval). Cve-2017-12824 vulnerability utilization document will eventually download and execute a full-featured back door program named WSCSPL.

Names

Name
WSCSPL

Category

Malware

Type

• Backdoor
• Info stealer

Information

• https://ti.360.net/blog/articles/analysis-of-targeted-attack-against-pakistan-by-exploiting-inpage-vulnerability-and-related-apt-groups-english/

Malpedia

• https://malpedia.caad.fkie.fraunhofer.de/details/win.wscspl

Other Information

Uuid

6d5bde93-d594-44a2-9ecf-984535c01184

Last Card Change

2020-04-23