Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:40:03 UTC
Home > List all groups > List all tools > List all groups using tool CsExt
 Tool: CsExt
Names CsExt
Category Malware
Type Backdoor
Description
(Cylance) Csext is a backdoor application developed in C# which runs as a service. Its primary
functionality is based on commands supplied by its configuration file. The configuration file is
able to store specific commands, which are intended to run at particular times.
Information
<https://www.cylance.com/content/dam/cylance/pages/operation-cleaver/Cylance_Operation_Cleaver_Report.pdf>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.csext>
Last change to this tool card: 23 April 2020
Download this tool card in JSON format
All groups using tool CsExt
Changed Name Country Observed
APT groups
  Cutting Kitten, TG-2889 2012-Mar 2016
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9410d200-0d4d-4398-b317-cceac19ac71f
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9410d200-0d4d-4398-b317-cceac19ac71f
Page 1 of 1