Home > List all groups > List all tools > List all groups using tool SharPyShell

Threat Group Cards: A Threat Actor Encyclopedia

Names	SharPyShell
Category	Malware
Type	Backdoor, Downloader
Description	(ClearSky) An obfuscated ASP.NET WebShell that executes commands received by an encrypted channel compiling them in memory at runtime and deploys a privilege escalation tool. This WebShell enables the attackers to download a ‘JuicyPotato’ file to the compromised machine so as to obtain extended privileges.
Information	<https://www.clearskysec.com/wp-content/uploads/2021/01/Lebanese-Cedar-APT.pdf>

Last change to this tool card: 19 April 2021

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups