Skip to content

Malware

RandomQuery

A set of powershell scripts, using services like Google Docs and Dropbox as C2.

RandomQuery is a PowerShell malware family operated by Kimsuky.

Background

A collection of PowerShell scripts that abuse legitimate services such as Google Docs and Dropbox for command and control.


Source: Malpedia (Fraunhofer FKIE).