NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/Derusbi
● Malware

Derusbi

Derusbi is malware used by multiple Chinese APT groups. Both Windows and Linux variants have been observed.

View graph Watch Export
Indicators tracked
0
Intelligence Reports40
40 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
22 relationships
T1113: Screen Capture
source
T1033: System Owner/User Discovery
source
T1056.001: Keylogging
source
T1123: Audio Capture
source
T1573.001: Symmetric Cryptography
source
T1082: System Information Discovery
source
T1070.006: Timestomp
source
T1125: Video Capture
source
T1083: File and Directory Discovery
source
T1057: Process Discovery
source
T1059.004: Unix Shell
source
T1571: Non-Standard Port
source
T1218.010: Regsvr32
source
T1095: Non-Application Layer Protocol
source
T1012: Query Registry
source
T1070.004: File Deletion
source
T1008: Fallback Channels
source
T1055.001: Dynamic-link Library Injection
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon