Tool: Killua| Names | Killua | |
| Category | Malware | |
| Type | Backdoor | |
| Description | (Palo Alto) The otc.dll file is a tool named Killua that is a simple backdoor that allows an actor to issue commands from a C2 server to run on the infected system by communicating back and forth using DNS tunneling. Based on string comparisons, we believe with high confidence that the same developer created both the Killua and Hisoka tools. | |
| Information | <https://unit42.paloaltonetworks.com/xhunt-campaign-attacks-on-kuwait-shipping-and-transportation-organizations/> | |
Last change to this tool card: 29 April 2020
Download this tool card in JSON format
Previous: KillDisk
Next: KimJongRAT
| Changed | Name | Country | Observed | ||
APT groups | |||||
| xHunt | [Unknown] | 2018 | |||
1 group listed (1 APT, 0 other, 0 unknown)
|
Thailand Computer Emergency Response Team (ThaiCERT) Follow us on
|
Report incidents |
|
 |
+66 (0)2-123-1234 | |
 |
report@thaicert.or.th | |
 |
Download PGP key | |