BROKEYOLK
- First seen
- 2022-03-15 00:00:00
- Malware type
- downloader
- Family
- Malware family
- Profile updated
- 2026-07-07 13:08:51
Targeted industries: government-and-public-sector technology-and-telecommunications
Context
According to Mandiant, BROKEYOLK is a .NET downloader that downloads and executes a file from a hard-coded command and control (C2) server. The malware communicates via SOAP (Simple Object Access Protocol) requests using HTTP.
Reports & references
- socradar.io — Dark Web Profile Apt42 Iranian Cyber Espionage Group (report)
- Mandiant — 17826 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Brokeyolk (report)