ThaiCERT    ETDA    MDES
Report
Search
Home > List all groups > List all tools > List all groups using tool NSIS

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: NSIS

NamesNSIS
Nullsoft Scriptable Install System
CategoryTools
TypeLoader
Description(Wikipedia) Nullsoft Scriptable Install System (NSIS) is a script-driven installer authoring tool for Microsoft Windows backed by Nullsoft, the creators of Winamp. NSIS is released under a combination of free software licenses, primarily the zlib license.
Information<https://en.wikipedia.org/wiki/Nullsoft_Scriptable_Install_System>
<https://nsis.sourceforge.io/Main_Page>
<https://www.mcafee.com/blogs/other-blogs/mcafee-labs/ransomware-families-use-nsis-installers-to-avoid-detection-analysis/>

Last change to this tool card: 26 May 2020

Download this tool card in JSON format

Previous: NotPetya
Next: NTDSDump

All groups using tool NSIS

ChangedNameCountryObserved

APT groups

 Buhtrap, Ratopak SpiderRussia2015-Jun 2019 
XCobalt GroupRussia2016-Oct 2019X
 RATicate[Unknown]2019 

3 groups listed (3 APT, 0 other, 0 unknown)

Thailand Computer Emergency Response Team (ThaiCERT)
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1234
E-mail report@thaicert.or.th
PGP Download PGP key