Trusted Design

WEBC2-BOLID (FAMILY)

概要

A WEBC2 backdoor is designed to retrieve a Web page from a pre-determined C2 server. It expects the Web page to contain special HTML tags; the backdoor will attempt to interpret the data between the tags as commands. This family of malware is a backdoor capable of downloading files and updating its configuration. Communication with the command and control (C2) server uses a combination of single-byte XOR and Base64 encoded data wrapped in standard HTML tags. The malware family installs a registry key as a persistence mechanism.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• WEBC2-CSON (FAMILY) (score: 0.88)
• WEBC2-AUSOV (FAMILY) (score: 0.86)
• WEBC2-UGX (FAMILY) (score: 0.86)
• WEBC2-RAVE (FAMILY) (score: 0.85)
• WEBC2-YAHOO (FAMILY) (score: 0.84)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る