SYMBOLCOMMON_NAMEaka. SYNONYMS
elf.bushwalk (Back to overview)

BUSHWALK

According to Mandiant, this is a webshell, written in Perl.

References
2024-02-27 ⋅ Mandiant ⋅ Ashley Frazer, Ashley Pearson, Austin Larsen, Jacob Thompson, Matt Lin, Robert Wallace, Ryan Gandrud
Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts
BUSHWALK Kubo Injector PITFUEL PITHOOK PITSOCK
2024-02-27 ⋅ Mandiant ⋅ Ashley Frazer, Ashley Pearson, Austin Larsen, Jacob Thompson, Matt Lin, Robert Wallace, Ryan Gandrud
Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts
BUSHWALK PITFUEL PITHOOK PITSOCK UNC5325
2024-01-31 ⋅ Mandiant ⋅ Dimiter Andonov, John Wolfram, Matt Lin, Robert Wallace, Tyler McLellan
Cutting Edge, Part 2: Investigating Ivanti Connect Secure VPN Zero-Day Exploitation
BUSHWALK WIREFIRE

There is no Yara-Signature yet.