Nimbo-C2 (ELF)

First seen
2023-01-15 00:00:00
Malware type
rat
Profile updated
2026-07-07 14:25:25

Context

According to the author, Nimbo-C2 is yet another (simple and lightweight) C2 framework. The agent currently supports Windows x64 and Linux. It's written in Nim, with some usage of .NET (by dynamically loading the CLR to the process).

Reports & references

  • sentinelone.com — Follow The Smoke China Nexus Threat Actors Hammer At The Doors Of Top Tier Targets (report)
  • malpedia.caad.fkie.fraunhofer.de — Elf.Nimbo C2 (report)
  • github.com — Nimbo C2 (report)

External references