Tool: Adzok| Names | Adzok Invisible Remote Administrator | |
| Category | Tools | |
| Type | Reconnaissance, Backdoor, Credential stealer, Info stealer, Exfiltration | |
| Description | (Citizen Lab) Similar to Adwind in functionality, the java-based Adzok is apparently from Bolivia. The premium version costs $990, but it appears that Packrat is using the “free” version. This version of Adzok does not use obfuscation, which makes it possible to simply uncompress the jar files within the docx and read the clear-text configuration file. Given the obfuscated nature of the other RATs that Packrat has used, their use of Adzok is surprising. It is possible that they were having stability, compatibility, or detection problems with other RATs and that Adzok served a specific requirement. | |
| Information | <https://citizenlab.ca/2015/12/packrat-report/> <https://adzok.com/> | |
| Malpedia | <https://malpedia.caad.fkie.fraunhofer.de/details/jar.adzok> | |
Last change to this tool card: 24 April 2021
Download this tool card in JSON format
Previous: Adwind
Next: Agent.BTZ
| Changed | Name | Country | Observed | ||
APT groups | |||||
| Packrat | [Latin America] | 2008 | |||
1 group listed (1 APT, 0 other, 0 unknown)
|
Thailand Computer Emergency Response Team (ThaiCERT) Follow us on
|
Report incidents |
|
 |
+66 (0)2-123-1234 | |
 |
report@thaicert.or.th | |
 |
Download PGP key | |