More_eggs (69f202e7-4bc9-4f4f-943f-330c053ae977)
More_eggs is a JScript backdoor used by Cobalt Group and FIN6. Its name was given based on the variable "More_eggs" being present in its code. There are at least two different versions of the backdoor being used, version 2.0 and version 4.4. [Talos Cobalt Group July 2018][Security Intelligence More Eggs Aug 2019]