ZxShell (eea89ff2-036d-4fa6-bbed-f89502c62318)

ZxShell is a remote administration tool and backdoor that can be downloaded from the Internet, particularly from Chinese hacker websites. It has been used since at least 2004.^{[FireEye APT41 Aug 2019]}^{[Talos ZxShell Oct 2014]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
ZxShell (eea89ff2-036d-4fa6-bbed-f89502c62318)	Tidal Software	Threat Group-3390 (79be2f31-5626-425e-844c-fd9c99e38fe5)	Tidal Groups	1
ZxShell (eea89ff2-036d-4fa6-bbed-f89502c62318)	Tidal Software	APT41 (502223ee-8947-42f8-a532-a3b3da12b7d9)	Tidal Groups	1
ZxShell (eea89ff2-036d-4fa6-bbed-f89502c62318)	Tidal Software	APT20 (4173c301-0307-458d-89dd-2583e94247ec)	Tidal Groups	1
ZxShell (eea89ff2-036d-4fa6-bbed-f89502c62318)	Tidal Software	Axiom (90f4d3f9-3fe3-4a64-8dc1-172c6d037dca)	Tidal Groups	1