Skip to content
MalwareWiki

Malware

AndroMut

aka Gelup

According to Proofpoint, AndroMut is a new downloader malware written in C++ that Proofpoint researchers began observing in the wild in June 2019.

AndroMut, also known as Gelup, is a Windows malware family operated by TA505.

Background

Proofpoint describes AndroMut as a C++ downloader that its researchers first spotted in the wild in June 2019. The "Andro" portion of the name reflects components resembling another downloader called Andromeda [1], while "Mut" derives from a mutex the analyzed sample creates: "mutshellmy777".

Source: Malpedia (Fraunhofer FKIE).