MechaFlounder (31cbe3c8-be88-4a4f-891d-04c3bb7ed482)
MechaFlounder is a python-based remote access tool (RAT) that has been used by APT39. The payload uses a combination of actor developed code and code snippets freely available online in development communities.[Unit 42 MechaFlounder March 2019]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| MechaFlounder (31cbe3c8-be88-4a4f-891d-04c3bb7ed482) | Tidal Software | APT39 (a57b52c7-9f64-4ffe-a7c3-0de738fb2af1) | Tidal Groups | 1 |