Skip to content
MalwareWiki

Malware

CACTUSTORCH

According to the GitHub repo, CACTUSTORCH is a JavaScript and VBScript shellcode launcher.

CACTUSTORCH is a JavaScript malware family operated by APT32 and Leviathan.

Background

Per its GitHub repository, CACTUSTORCH is a shellcode launcher written for JavaScript and VBScript. It launches a 32-bit instance of a chosen binary and injects shellcode into that process.

Source: Malpedia (Fraunhofer FKIE).