Skip to content
MalwareWiki

Malware

Contopee

aka WHITEOUT

FireEye described this malware as a proxy-aware backdoor that communicates using a custom-encrypted binary protocol.

Contopee, also known as WHITEOUT, is a Windows malware family operated by Lazarus Group.

Background

FireEye characterized this malware as a proxy-aware backdoor that communicates over a custom-encrypted binary protocol. It can optionally keep configuration data in the registry. The backdoor has been seen to implement 26 commands, covering directory traversal, file system manipulation, archiving and transmitting data, and executing commands.

Source: Malpedia (Fraunhofer FKIE).