Coffloader

Reported Context (1)

COFFProxy — a backdoor that loads Beacon payloads in Coffloader format. We also identified a Golang implementation of this tool that, instead of loading a Beacon, executes commands similar to those run via cmd. APT31 Targeted Russian IT Firms With New Malware and Cloud-Based C2

Malware (11)

People (2)

Threat Actors (2)

MITRE ATT&CK (51)

Vendors (3)

Products (11)

Tools (16)

Industries (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.