SYMBOLCOMMON_NAMEaka. SYNONYMS
php.antak (Back to overview)

ANTAK

Actor(s): APT39, Anunak

Antak is a webshell written in ASP.Net which utilizes PowerShell.

References
2018-10-01 ⋅ FireEye ⋅ Regina Elwell, Katie Nickels
@techreport{elwell:20181001:attcking:3c6d888, author = {Regina Elwell and Katie Nickels}, title = {{ATT&CKing FIN7}}, date = {2018-10-01}, institution = {FireEye}, url = {https://summit.fireeye.com/content/dam/fireeye-www/summit/cds-2018/presentations/cds18-technical-s05-att&cking-fin7.pdf}, language = {English}, urldate = {2020-06-25} } ATT&CKing FIN7
Bateleur BELLHOP Griffon ANTAK POWERPIPE POWERSOURCE HALFBAKED BABYMETAL Carbanak Cobalt Strike DNSMessenger DRIFTPIN PILLOWMINT SocksBot
2015-08-19 ⋅ Github (samratashok) ⋅ Nikil Mittal
@online{mittal:20150819:antak:6b613d2, author = {Nikil Mittal}, title = {{Antak WebShell}}, date = {2015-08-19}, organization = {Github (samratashok)}, url = {https://github.com/samratashok/nishang/blob/master/Antak-WebShell/antak.aspx}, language = {English}, urldate = {2019-12-18} } Antak WebShell
ANTAK
2014-06-04 ⋅ Lab of a Penetration Tester ⋅ Nikhil Mittal
@online{mittal:20140604:introducing:48a5fec, author = {Nikhil Mittal}, title = {{Introducing Antak - A webshell which utilizes powershell}}, date = {2014-06-04}, organization = {Lab of a Penetration Tester}, url = {http://www.labofapenetrationtester.com/2014/06/introducing-antak.html}, language = {English}, urldate = {2020-01-08} } Introducing Antak - A webshell which utilizes powershell
ANTAK

There is no Yara-Signature yet.