Names | SUGARLOADER | |
Category | Malware | |
Type | Loader | |
Description | (Elastic) SUGARLOADER is used for initial access on the machine, and initializing the environment for the final stage. This binary is obfuscated using a binary packer, limiting what can be seen with static analysis. | |
Information | <https://www.elastic.co/security-labs/elastic-catches-dprk-passing-out-kandykorn> | |
Malpedia | <https://malpedia.caad.fkie.fraunhofer.de/details/osx.sugarloader> |
Last change to this tool card: 17 January 2024
Download this tool card in JSON format
Previous: SUDDENICON
Next: SUN4ME
Changed | Name | Country | Observed | ||
APT groups | |||||
Lazarus Group, Hidden Cobra, Labyrinth Chollima | 2007-Sep 2024 |
1 group listed (1 APT, 0 other, 0 unknown)
Digital Service Security Center Follow us on |
Report incidents |
|
+66 (0)2-123-1227 | ||
[email protected] |