ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Report
Search
Home > List all groups > List all tools > List all groups using tool BUBBLEWRAP

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: BUBBLEWRAP

NamesBUBBLEWRAP
Backdoor.APT.FakeWinHTTPHelper
CategoryMalware
TypeReconnaissance, Backdoor
Description(FireEye) BUBBLEWRAP is a full-featured backdoor that is set to run when the system boots, and can communicate using HTTP, HTTPS, or a SOCKS proxy. This backdoor collects system information, including the operating system version and hostname, and includes functionality to check, upload, and register plugins that can further enhance its capabilities.
Information<https://www.fireeye.com/blog/threat-research/2015/11/china-based-threat.html>
MITRE ATT&CK<https://attack.mitre.org/software/S0043/>
Malpedia<https://malpedia.caad.fkie.fraunhofer.de/details/win.bubblewrap>

Last change to this tool card: 30 December 2022

Download this tool card in JSON format

Previous: BTC Changer
Next: BUFFETLINE

All groups using tool BUBBLEWRAP

ChangedNameCountryObserved

APT groups

 Temper Panda, admin@338China2014 

1 group listed (1 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]