CLEANTOAD
- Malware type
- wiper
- Family
- Malware family
- Profile updated
- 2026-07-07 14:52:19
Context
CLEANTOAD is a disruption tool that will delete file system artifacts, including those related to BLINDTOAD, and will run after a date obtained from a configuration file. The malware injects shellcode into notepad.exe and it overwrites and deletes files, modifies registry keys, deletes services, and clears Windows event logs.
Reports & references
- Mandiant — Rpt Apt38 2018 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Cleantoad (report)