[ALL_FAMILIES]

GoldenSpy

backdoor1 mutex signatures

[BASIC_INFORMATION]

FAMILY_NAME:
GoldenSpy
CATEGORY:
BACKDOOR
DESCRIPTION:
GoldenSpy is a backdoor malware that provides remote access capabilities to compromised systems. It uses specific mutexes to ensure single instance execution and coordinate its activities on the infected system.
TAGS:
remote_accessbackdoorwindowspersistence

[MUTEX_SIGNATURES](1)

[MUTEX_01]
nb_app_log_mutex
ANALYST: @adhikara13 DATE: 2024-12-19

[QUICK_ACTIONS]

[THREAT_INTELLIGENCE]

ATTRIBUTION:
Unknown
FIRST_OBSERVED:
2020

[SIGMA_RULE]

[STATISTICS]

MUTEX_COUNT:1
THREAT_ACTORS:1
ALIASES:0
TAGS:4
CATEGORY:BACKDOOR
Malware profile loaded successfully

EvilMutex Project v1.0.0

Open Source Threat Intelligence Database