Rancor — APT Profile

Rancor is a threat group that has led targeted campaigns against the South East Asia region. Rancor uses politically-motivated lures to entice victims to open malicious documents.

Tools & malware

certutil LOLBin
DDKONG Backdoor
PLAINTEE Backdoor
Reg LOLBin

Vendor research

RANCOR: Targeted Attacks in South East Asia Using PLAINTEE and DDKONG Malware Families Rancor

Read the full analysis on IntelFusions