NCSC (UK)PDF
DAMASCENED PEACOCK
Excerpt
Version 1
11 April 2025
© Crown Copyright 2025
Malware Analysis Report
DAMASCENED PEACOCK
A lightweight, staged downloader targeting
Windows, delivered via spear-phishing.
DAMASCENED PEACOCK
A lightweight, staged downloader targeting Windows,
delivered via spear-phishing.
Executive summary
• DAMASCENED PEACOCK is a lightweight downloader targeting
Windows.
• The analysed sample was for 32-bit (x86) Windows. It supports downloading a 64-bit onward stage.
• The malware was observed in a spear-phishing campaign which took place in late 2024.
• DAMASCENED PEACOCK is downloaded and executed by a code
signed first stage.
• DAMASCENED PEACOCK is the second of 3 stages and is responsible for downloading the fi…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by NCSC (UK) on ncsc.gov.uk.
More from NCSC (UK)5
- BADBAZAAR and MOONSHINE: Technical analysis and mitigationsNCSC (UK) · Added 10 Apr 2025
- BADBAZAAR and MOONSHINE: Spyware targeting Uyghur, Taiwanese and Tibetan groups and civil society actorsNCSC (UK) · Added 10 Apr 2025
- Advisory: Russian FSB cyber actor Star Blizzard continues worldwide spear-phishing campaignsNCSC (UK) · Added 25 Nov 2024
- ncsc-mar-pygmy-goat.pdfNCSC (UK) · Added 13 Nov 2024
On the same topics
- Star Blizzard refines phishing and malware delivery with the RedFlick techniqueMicrosoft · Published 29 Sep
- Introducing LX RAT: ITR Phishing Targets Finance and Techzerobec.com · Published 11 Jun
- Analysis of a Phishing Email Attack Case by the Larva-24009 Threat ActorAhnLab · Published 2 Aug
- TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel IndustryTrend Micro · Published 29 Jun
