← Back to Pulse Feed
PULSE DETAIL
In recent weeks, Unit 42 has been analyzing delivery documents used in spear-phishing attacks that drop a custom downloader used in cyber espionage attacks. This specific downloader, Cmstar, is associated with the Lurid downloader also known as ‘Enfal’. Cmstar was named for the log message ‘CM**’ used by the downloader.
Indicators of Compromise (1 / 85 total)
| TYPE | INDICATOR | DESCRIPTION | CREATED | |
|---|---|---|---|---|
| Mutex | {53A4988C-F91F-4054-9076-220AC5EC03F3} | — | 2015-05-18 |