CREAMSICLE (Malware Family) By Fraunhofer FKIE Archived: 2026-04-06 02:52:33 UTC win.creamsicle (Back to overview) CREAMSICLE Actor(s): APT 30 There is no description at this point. References 2015-04-01 ⋅ FireEye ⋅ FireEye APT30 AND THE MECHANICS OF A LONG-RUNNING CYBER ESPIONAGE OPERATION BACKBEND backspace CREAMSICLE FLASHFLOOD GEMCUTTER MILKMAID Naikon NETEAGLE ORANGEADE SHIPSHAPE SPACESHIP SslMM Sys10 WinMM xsPlus APT30 There is no Yara-Signature yet. Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.creamsicle https://malpedia.caad.fkie.fraunhofer.de/details/win.creamsicle Page 1 of 1