Maintools.js (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 17:30:33 UTC
js.turla_maintools (Back to overview)
Maintools.js
Actor(s): Turla
Expects a parameter to run: needs to be started as 'maintools.js EzZETcSXyKAdF_e5I2i1'.
References
2017-10-04 ⋅ Twitter (@JohnLaTwC) ⋅ John Lambert
Tweet on Turla JS backdoor
Maintools.js
There is no Yara-Signature yet.
Source: https://malpedia.caad.fkie.fraunhofer.de/details/js.turla_maintools
https://malpedia.caad.fkie.fraunhofer.de/details/js.turla_maintools
Page 1 of 1