ThaiCERT    ETDA    MDES
Report
Search
Home > List all groups > List all tools > List all groups using tool Killua

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: Killua

NamesKillua
CategoryMalware
TypeBackdoor
Description(Palo Alto) The otc.dll file is a tool named Killua that is a simple backdoor that allows an actor to issue commands from a C2 server to run on the infected system by communicating back and forth using DNS tunneling. Based on string comparisons, we believe with high confidence that the same developer created both the Killua and Hisoka tools.
Information<https://unit42.paloaltonetworks.com/xhunt-campaign-attacks-on-kuwait-shipping-and-transportation-organizations/>

Last change to this tool card: 29 April 2020

Download this tool card in JSON format

Previous: KillDisk
Next: KimJongRAT

All groups using tool Killua

ChangedNameCountryObserved

APT groups

 xHuntIran2018-Aug 2019 

1 group listed (1 APT, 0 other, 0 unknown)

Thailand Computer Emergency Response Team (ThaiCERT)
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1234
E-mail report@thaicert.or.th
PGP Download PGP key