SYMBOLCOMMON_NAMEaka. SYNONYMS
win.xtunnel_net (Back to overview)

X-Tunnel (.NET)

Actor(s): APT28


This is a rewrite of win.xtunnel using the .NET framework that surfaced late 2017.

References
2018-10-04NCSC UKNCSC UK
Indicators of Compromise for Malware used by APT28
X-Tunnel (.NET)

There is no Yara-Signature yet.