Rocketman

Malware updated a month ago (2024-11-29T13:37:22.025Z)
Download STIX
Preview STIX
RocketMan is a type of malware, short for malicious software, which is designed to exploit and damage computer systems. It can infiltrate systems through suspicious downloads, emails, or websites, often without the user's knowledge. Once it gains access, RocketMan can steal personal information, disrupt operations, or even hold data hostage for ransom. The SHA-256 hash for RocketMan is 009406c1c7c0b289a25d44dfaa8364633d9b71df5f3c7a65deec1ef00a8c2ebb. This malware has been linked to the cyber threat group Tomiris, along with other tools such as Topinambour, Tunnus, and TunnusSched (also known as QUIETCANARY). Evidence suggests that these tools may be exclusively owned by Tomiris. Notably, victims of these attacks have included government entities in Russia, discovered in 2019, indicating the serious nature of this threat and its potential for high-level disruption. RocketMan shares the same RC4 implementation as Tunnus and Topinambour, two other malwares associated with Tomiris. This commonality suggests that these tools are likely developed by the same entity, further strengthening the link between RocketMan and the Tomiris group. As such, organizations need to be vigilant about this threat and employ robust cybersecurity measures to protect their systems.
Description last updated: 2024-05-04T23:30:02.223Z
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the Rocketman Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more