PHOREAL is a signature backdoor used by APT32. [1]
PHOREAL is capable of manipulating the Registry.[1]
PHOREAL is capable of creating reverse shell.[1]
PHOREAL communicates via ICMP for C2.[1]
[1]
