SYMBOLCOMMON_NAMEaka. SYNONYMS
win.snappybee (Back to overview)

SNAPPYBEE

aka: Deed RAT, POISONPLUG.DEED

Actor(s): Earth Estries

There is no description at this point.

References
2026-08-19 ⋅ Bitdefender ⋅ Martin Zugec
SilkParasite: Tracking a China-Nexus APT Across Central Asia
BloodAlchemy ShadowPad SNAPPYBEE SilkParasite
2026-08-19 ⋅ Bitdefender ⋅ Gheorghe Adrian Schipor, Marius Andrei Baciu, Victor Vrabie
SilkParasite: Inside a China-nexus espionage cluster and its seven-family RAT ecosystem across Central Asia
BloodAlchemy ShadowPad SNAPPYBEE
2026-05-05 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White, Jungsoo An
UAT-8302 and its box full of malware
SNOWLIGHT DracuLoader FINALDRAFT SNAPPYBEE STOWAWAY VShell UAT-8302
2026-02-03 ⋅ Darktrace ⋅ Nathaniel Bill
Darktrace Malware Analysis: Unpacking SnappyBee
Cobalt Strike SNAPPYBEE
2026-01-20 ⋅ ⋅ Rostelecom-Solar ⋅ Pandora Hive Mind
ShadowRelay – a unique backdoor in the public sector
ShadowPad SNAPPYBEE
2025-10-20 ⋅ Darktrace ⋅ Nathaniel Jones, Sam Lister
Salty Much: Darktrace’s view on a recent Salt Typhoon intrusion
SNAPPYBEE
2025-01-29 ⋅ Google ⋅ Conor Quigley, Luke Jenkins, Nino Isakovic
ScatterBrain: Unmasking the Shadow of PoisonPlug's Obfuscator
POISONPLUG ShadowPad SNAPPYBEE
2025-01-21 ⋅ Trend Micro ⋅ Leon Chang, Theo Chen
Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions
Cobalt Strike HemiGate ShadowPad SNAPPYBEE SparrowDoor UNC4841
2024-11-25 ⋅ Trend Micro ⋅ Lenart Bermejo, Leon M Chang, Ted Lee, Theo Chen
Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions
MASOL SNAPPYBEE

There is no Yara-Signature yet.