HOMEFRY — Malware Profile

HOMEFRY is a 64-bit Windows password dumper/cracker that has previously been used in conjunction with other Leviathan backdoors.

MITRE ATT&CK techniques (3)

• T1003 OS Credential Dumping
• T1027.013 Encrypted/Encoded File
• T1059.003 Windows Command Shell

Attributed threat actors

• APT40

Read the full analysis on IntelFusions