Home > List all groups > List all tools > List all groups using tool HATVIBE

Threat Group Cards: A Threat Actor Encyclopedia

Names	HATVIBE
Category	Malware
Type	Loader
Description	(The Hacker News) Opening the document and enabling macros results in the execution of an encoded HTML Application (HTA) named HATVIBE, which sets up persistence on the host using a scheduled task and paves the way for a Python backdoor codenamed CHERRYSPY, which is capable of running commands issued by a remote server.
Information	<https://thehackernews.com/2024/07/ukrainian-institutions-targeted-using.html> <https://cert.gov.ua/article/6280129>

Last change to this tool card: 27 August 2024

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups