 |
สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์ Electronic Transactions Development Agency |
|
สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์ Electronic Transactions Development Agency |
Tool: Kazuar| Names | Kazuar | |
| Category | Malware | |
| Type | Backdoor, Info stealer, Exfiltration, Loader | |
| Description | (Palo Alto) Kazuar is a fully featured backdoor written using the .NET Framework and obfuscated using the open source packer called ConfuserEx. Kazuar has an extensive command set, many of which are similar in functionality as other backdoor Trojans. However, a few commands specific to Kazuar appear to be unique and are worth further discussion. | |
| Information | <https://unit42.paloaltonetworks.com/unit42-kazuar-multiplatform-espionage-backdoor-api-access/> <https://www.accenture.com/us-en/blogs/cyber-defense/turla-belugasturgeon-compromises-government-entity> | |
| MITRE ATT&CK | <https://attack.mitre.org/software/S0265/> | |
| Malpedia | <https://malpedia.caad.fkie.fraunhofer.de/details/win.kazuar> | |
| AlienVault OTX | <https://otx.alienvault.com/browse/pulses?q=tag:Kazuar> | |
Last change to this tool card: 05 January 2021
Download this tool card in JSON format
| Changed | Name | Country | Observed | ||
APT groups | |||||
| Turla, Waterbug, Venomous Bear |  | 1996-Apr 2022  | |||
1 group listed (1 APT, 0 other, 0 unknown)
|
Digital Service Security Center Follow us on
|
Report incidents |
|
 |
+66 (0)2-123-1227 | |
 |
[email protected] | |