Trusted Design

LONGRUN (FAMILY)

概要

LONGRUN is a backdoor designed to communicate with a hard-coded IP address and provide the attackers with a custom interactive shell. It supports file uploads and downloads, and executing arbitrary commands on the compromised machine. When LONGRUN executes, it first loads configuration data stored as an obfuscated string inside the PE resource section. The distinctive string thequickbrownfxjmpsvalzydg is used as part of the input to the decoding algorithm. When the configuration data string is decoded it is parsed and treated as an IP and port number. The malware then connects to the host and begins interacting with it over a custom protocol.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• MANITSME (FAMILY) (score: 0.63)
• HACKSFASE (FAMILY) (score: 0.61)
• PWS:MSIL/Stimilina (score: 0.60)
• PWS:Win32/Zuten (score: 0.60)
• PWS:MSIL/Cidekoq (score: 0.59)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る