ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Report
Search
Home > List all groups > List all tools > List all groups using tool PowerMagic

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: PowerMagic

NamesPowerMagic
CategoryMalware
TypeBackdoor
Description(Kaspersky) The script manutil.vbs, which is dropped by the initial package, is a loader for a previously unknown backdoor written in PowerShell that we named PowerMagic.
Information<https://securelist.com/bad-magic-apt/109087/>
Malpedia<https://malpedia.caad.fkie.fraunhofer.de/details/ps1.power_magic>

Last change to this tool card: 22 June 2023

Download this tool card in JSON format

Previous: PowerLess Backdoor
Next: Powermud

All groups using tool PowerMagic

ChangedNameCountryObserved

APT groups

 Bad Magic, RedStinger[Unknown]2020-May 2023 

1 group listed (1 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]