MoleNet (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 15:08:22 UTC
win.molenet (Back to overview)
MoleNet
Actor(s): Molerats
MoleNet is a .NET downloader malware used by the Molerats group in targeted attacks in the Middle East. Before
downloading additional payloads, it first collects information about the infected machine using WMI queries and
sends the data to its operators. It was first discovered in 2020, however, Cybereason researchers showed that it has
been in use since at least 2019, with infrastructure that operated since 2017.
References
2020-12-09 ⋅ Cybereason ⋅ Cybereason Nocturnus
New Malware Arsenal Abusing Cloud Platforms in Middle East Espionage Campaign
DropBook MoleNet Quasar RAT SharpStage Spark
There is no Yara-Signature yet.
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.molenet
https://malpedia.caad.fkie.fraunhofer.de/details/win.molenet
Page 1 of 1