Loading malware…
10 distinct techniques documented for this family, organized by ATT&CK tactic.
T1195.002 — Supply Chain Compromise: Compromise Software Supply Chain (Initial Access)
T1543 — Create or Modify System Process (Persistence)
T1543 — Create or Modify System Process (Persistence)
T1027 — Obfuscated Files or Information (Defense Evasion)
T1497 — Virtualization/Sandbox Evasion (Defense Evasion)
T1539 — Steal Web Session Cookie (Credential Access)
T1552 — Unsecured Credentials (Credential Access)
T1083 — File and Directory Discovery (Discovery)
T1497 — Virtualization/Sandbox Evasion (Defense Evasion)
T1080 — Taint Shared Content (Lateral Movement)
T1071 — Application Layer Protocol (Command and Control)
T1102 — Web Service (Command and Control)
5 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.