SYMBOLCOMMON_NAMEaka. SYNONYMS
win.exmatter (Back to overview)

ExMatter

Exfiltration tool written in .NET, used by at least one BlackMatter ransomware operator.

References
2024-06-05 ⋅ S-RM ⋅ David Broom, Gavin Hull
Exmatter malware levels up: S-RM observes new variant with simultaneous remote code execution and data targeting
BlackCat BlackMatter Conti ExMatter LockBit REvil Ryuk
2022-11-09 ⋅ Netskope ⋅ Gustavo Palazolo
BlackCat Ransomware: Tactics and Techniques From a Targeted Attack
BlackCat ExMatter
2022-06-28 ⋅ Accenture ⋅ Accenture
Steal(Bit) or exfil, what does it (Ex)Matter? Comparative Analysis of Custom Exfiltration Tools
ExMatter StealBit
2022-03-22 ⋅ Kroll ⋅ Cole Manaster, Pierson Clair
Analyzing Exmatter: A Ransomware Data Exfiltration Tool
ExMatter
2021-11-19 ⋅ Twitter (@knight0x07) ⋅ neeraj
Tweet on Exmatter, custom data exfiltration tool, used by Blackmatter ransomware group
ExMatter
2021-11-01 ⋅ Symantec ⋅ Threat Hunter Team
BlackMatter: New Data Exfiltration Tool Used in Attacks
ExMatter

There is no Yara-Signature yet.