External/APTs-Adversary-Simulation
1
0
Fork 0
mirror of https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git synced 2026-08-04 09:41:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
S3N4T0R
2025-12-23 05:38:40 -05:00
committed by GitHub
parent b851833e97
commit 2962889307
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
North Koreans APT/Silent Chollima/README.md
+2
View File
@@ -26,6 +26,8 @@ I recreated an HTML file identical to that used by the attackers. When the PDF i
## The second stage (GOVERSHELL payload)
Throughout various campaigns Volexity observed active changes in the malware, with significant differences in how the malware communicated and functioned. All variants observed by Volexity make use of a scheduled task for persistence and provide the operator the ability to execute arbitrary commands on the target’s device. With the exception of the first variant, all GOVERSHELL implants were DLL files that were loaded via search order hijacking from the legitimate version of either the 32- or 64-bit version of an open-source project called Tablacus Explorer.