Home > List all groups > List all tools > List all groups using tool YamaBot

Threat Group Cards: A Threat Actor Encyclopedia

Names	YamaBot Kaos
Category	Malware
Type	Backdoor
Description	(JPCERT/CC) YamaBot malware communicates with C2 servers using HTTP requests. The following is a list of function names included in the sample that targets Windows OS. It is the attacker that named the malware as Yamabot. Those targeting Windows OS have functions specific to it, such as creating and checking Mutex.
Information	<https://blogs.jpcert.or.jp/en/2022/07/yamabot.html>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/win.yamabot>

Last change to this tool card: 28 December 2022

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Lazarus Group, Hidden Cobra, Labyrinth Chollima		2007-Sep 2024

1 group listed (1 APT, 0 other, 0 unknown)

APT groups