Loading malware…
2 distinct threat actors Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.
Inside the Rogue package, we found two main components. One was what appeared to be DarkShades malware, and the other one was Hawkshaw.
Inside the Rogue package, we found two main components. One was what appeared to be DarkShades malware, and the other one was Hawkshaw.
1 distinct technique documented for this family, organized by ATT&CK tactic.
The Rogue malware family is an MRAT. This type of malware can gain control over the host device and exfiltrate any kind of data (photos, location, contacts, messages, etc.), modify the files on the device, download additional payloads and basically anything else that comes to mind.
36 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.