Also known as: jhuhugit, jkeyskw, downrage, carberplike, GAMEFISH
No AI analysis yet.
simple tool to facilitate download and persistence of a next-stage tool; collects system information and metadata probably in an attempt to tell sandbox-environments apart from real targets on the server-side; uses domains of search engines like Google to check for Internet connectivity; XOR-based string obfuscation with a 16-byte key Attributed to: APT28.