malware

Explosive

S0569 · ATT&CK v19.2

Platforms

Windows

Tracked actors

Description

[Explosive](https://attack.mitre.org/software/S0569) is a custom-made remote access tool used by the group [Volatile Cedar](https://attack.mitre.org/groups/G0123). It was first identified in the wild in 2015.(Citation: CheckPoint Volatile Cedar March 2015)(Citation: ClearSky Lebanese Cedar Jan 2021)

Actors that use this

1 tracked actor

Volatile CedarATT&CK-attributed