HALFRIG

HALFRIGHALFRIG

Description

Used for the first time in February 2023. This tool is distinguished from the others by the embedded code that runs the COBALT STRIKE tool. HALFRIG is a stager for CobaltStrike Beacon that was used in an espionage campaign significantly overlapping with publicly described activity linked to the APT29 and NOBELIUM activity sets. HALFRIG has significant code overlap with the QUARTERRIG and it is highly probable that it was developed by the same team.

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
QUARTERRIG
Actor
APT33
Software
SNOWYAMBER
Actor
HAFNIUM
Actor
Grayling
Actor
HollowQuill
Sourced from MITRE ATT&CK Enterprise . Curated by Adam Lundqvist, SQUR.