Home > List all groups > List all tools > List all groups using tool Reshell

Threat Group Cards: A Threat Actor Encyclopedia

Names	Reshell
Category	Malware
Type	Backdoor
Description	(Palo Alto) Following the creation of the users and the reconnaissance activity, the attackers attempted to execute a previously undocumented .NET backdoor, which they named windows.exe. We named this threat Reshell based on its program database (PDB) path.
Information	<https://unit42.paloaltonetworks.com/alloy-taurus-targets-se-asian-government/>

Last change to this tool card: 12 October 2023

Download this tool card in JSON format

2 groups listed (2 APT, 0 other, 0 unknown)

APT groups