Home > List all groups > List all tools > List all groups using tool Danfuan

Threat Group Cards: A Threat Actor Encyclopedia

Names	Danfuan
Category	Malware
Type	Backdoor
Description	(Symantec) This is a previously unseen malware. It is a DynamicCodeCompiler that compiles and executes received C# code. It appears to be based on .NET dynamic compilation technology. This type of dynamically compiled code is not created on disk but exists in memory. It acts as a backdoor on infected systems.
Information	<https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/cranefly-new-tools-technique-geppei-danfuan>

Last change to this tool card: 18 November 2022

Download this tool card in JSON format

Previous: DanDrop
Next: DangerAds

1 group listed (1 APT, 0 other, 0 unknown)

APT groups