Skip to content
MalwareWiki

Malware

crackshot

CRACKSHOT is a downloader that can download files, including binaries, and run them from the hard disk or execute them directly in memory.

crackshot is a Windows malware family operated by APT41.

Background

CRACKSHOT is a downloader capable of retrieving files, binaries among them, and either running them from disk or executing them straight from memory. It can additionally put itself into a dormant state.

Source: Malpedia (Fraunhofer FKIE).