TA505 APT Hackers using AndroMut Malware to Drop FlawedAmmyy RAT

Researchers uncovered a new malware dropper called AndroMut from one of the infamous APT group TA505 to drop the FlawedAmmyy Remote Access Trojan. The Andro part of the name comes from some of the pieces which bear resemblance to another downloader known as Andromeda. Mut is based off a mutex that the analyzed sample creates: mutshellmy777 Another campaign targeted recipients at financial institutions in Singapore, UAE, and the USA.”]

Source: https://gbhackers.com/ta505-apt-hackers-using-new-andromut-malware-to-drop-flawedammyy-rat-and-gain-remote-access/