⚠
GoldenSpy
backdoor1 mutex signatures
[BASIC_INFORMATION]
FAMILY_NAME:
GoldenSpy
CATEGORY:
BACKDOOR
DESCRIPTION:
GoldenSpy is a backdoor malware that provides remote access capabilities to compromised systems. It uses specific mutexes to ensure single instance execution and coordinate its activities on the infected system.
TAGS:
remote_accessbackdoorwindowspersistence
[MUTEX_SIGNATURES](1)
[MUTEX_01]
nb_app_log_mutex
ANALYST: @adhikara13 DATE: 2024-12-19
[QUICK_ACTIONS]
[THREAT_INTELLIGENCE]
ATTRIBUTION:
⚠Unknown
FIRST_OBSERVED:
2020
[SIGMA_RULE]
[STATISTICS]
MUTEX_COUNT:1
THREAT_ACTORS:1
ALIASES:0
TAGS:4
CATEGORY:BACKDOOR
Malware profile loaded successfully