SYMBOLCOMMON_NAMEaka. SYNONYMS
asp.localolive (Back to overview)

LocalOlive

Actor(s): Sandworm

According to Microsoft, this is a web shell, written in ASPX supporting C#, carrying sufficient yet rudimentary functionality to support the following secondary activities: uploading and downloading files, running shell commands, opening a port (default port is set to TCP 250).

References
2025-02-12 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
The BadPilot campaign: Seashell Blizzard subgroup conducts multiyear global access operation
LocalOlive

There is no Yara-Signature yet.