Names | LOADOUT | |
Category | Malware | |
Type | Downloader | |
Description | (Mandiant) LOADOUT is an obfuscated VBScript-based downloader which harvests extensive information from the infected system. The harvested information is then sent to a command-and-control (C2) server. C2 server responses for LOADOUT infections delivered Griffon, a JavaScript-based downloader which retrieves additional JavaScript modules using HTTP or DNS and executes them in memory. | |
Information | <https://www.mandiant.com/resources/evolution-of-fin7> |
Last change to this tool card: 05 April 2022
Download this tool card in JSON format
Changed | Name | Country | Observed | ||
APT groups | |||||
FIN7 | 2013-Jul 2024 |
1 group listed (1 APT, 0 other, 0 unknown)
Digital Service Security Center Follow us on |
Report incidents |
|
+66 (0)2-123-1227 | ||
[email protected] |