Home > List all groups > List all tools > List all groups using tool DRAWSTRING

Threat Group Cards: A Threat Actor Encyclopedia

Names	DRAWSTRING
Category	Malware
Type	Downloader, Reconnaissance, Info stealer
Description	(Mandiant) A downloader, which Mandiant tracks as DRAWSTRING, has some internal recon functionality. While primarily providing FIN13 the ability to download and execute arbitrary files, DRAWSTRING will also execute systeminfo.exe and upload that information to a command and control (C2) server.
Information	<https://www.mandiant.com/resources/fin13-cybercriminal-mexico>

Last change to this tool card: 26 December 2021

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups