S0094Windows
S0094Trojan.Karagany
Platforms
1
ATT&CK
14.1
References
4
Description
[Trojan.Karagany](https://attack.mitre.org/software/S0094) is a modular remote access tool used for recon and linked to [Dragonfly](https://attack.mitre.org/groups/G0035). The source code for [Trojan.Karagany](https://attack.mitre.org/software/S0094) originated from Dream Loader malware which was leaked in 2010 and sold on underground forums. (Citation: Symantec Dragonfly)(Citation: Secureworks Karagany July 2019)(Citation: Dragos DYMALLOY )
Platforms· 1
Windows
Attributed to1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Group | Dragonflyg0035 | 100% | live |
References
- https://attack.mitre.org/software/S0094
- https://www.dragos.com/threat/dymalloy/
- https://www.secureworks.com/research/updated-karagany-malware-targets-energy-sector
- https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=7382dce7-0260-4782-84cc-890971ed3f17&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=librarydocuments
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.