SYMBOLCOMMON_NAMEaka. SYNONYMS
win.driveocean (Back to overview)

DriveOcean

aka: Google Drive RAT

Actor(s): APT28

Communicates via Google Drive.

References
2023-10-26 ⋅ ⋅ ANSSI ⋅ ANSSI
Attack Campaigns of APT28 since 2021
CredoMap DriveOcean Empire Downloader Graphite MimiKatz Mocky LNK reGeorg
2020-12-17 ⋅ Trend Micro ⋅ Feike Hacquebord, Lord Alfred Remorin
Pawn Storm’s Lack of Sophistication as a Strategy
DriveOcean

There is no Yara-Signature yet.