Threat Group Cards: A Threat Actor Encyclopedia
Excerpt
Home > List all groups > List all tools > List all groups using tool Emissary Tool: Emissary
Names Emissary
Category Malware
Type Backdoor
(Palo Alto) This Trojan is related to the Elise backdoor described in the Operation Lotus Blossom report. Both Emissary and Elise are part of a malware group referred to as “LStudio”, which is based on the following debug strings found in Emissary and Elise samples.
There is code overlap between Emissary and Elise, specifically in the use of a common function to log debug messages to a file and a custom algorithm to decrypt the configuration file. The custom algorithm used by…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by ETDA Threat Group Cards on apt.etda.or.th.
Mentioned in the excerpt
More from ETDA Threat Group Cards19
- Threat Group Cards: A Threat Actor EncyclopediaETDA Threat Group Cards · Added 25 Oct
- listgroups.cgi?u=72670111-f95a-423c-a296-f424939cc08eETDA Threat Group Cards · Added 19 Oct
- listgroups.cgi?u=cacc4de8-a9b2-4231-9fdb-8aefa8ed0a5cETDA Threat Group Cards · Added 19 Oct
- listgroups.cgi?u=b999fd13-e5d2-4056-9676-907b6e1be7d0ETDA Threat Group Cards · Added 19 Oct
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
