Skip to content

Hide Navigation Hide TOC

MM Core (74bd8c09-73d5-4ad8-ab1f-e94a4853c936)

Also known as “BaneChant”, MM Core is a file-less APT which is executed in memory by a downloader component. It was first reported in 2013 under the version number “2.0-LNK” where it used the tag “BaneChant” in its command-and-control (C2) network request. A second version “2.1-LNK” with the network tag “StrangeLove” was discovered shortly after.

Cluster A Galaxy A Cluster B Galaxy B Level
MM Core (6363cc2f-08f1-47a0-adbf-5cf19ea89ffd) Malpedia MM Core (74bd8c09-73d5-4ad8-ab1f-e94a4853c936) Tool 1