OilCheck (694f53b5-a54e-5bc6-b58a-0c22771ea3a6)
OilCheck is a C#/.NET downloader that has been used by OilRig since at least 2022 including against targets in Israel. OilCheck uses draft messages created in a shared email account for C2 communication.[ESET OilRig Downloaders DEC 2023]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| OilRig (d01abdb1-0378-4654-aa38-1a4a292703e2) | Tidal Groups | OilCheck (694f53b5-a54e-5bc6-b58a-0c22771ea3a6) | Tidal Software | 1 |