MITRE ATT&CKsoftware (malware)

S0223 POWERSTATS

Published 2018-04-18 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
Powermud
Version
2.3
Created
2018-04-18

Description

POWERSTATS is a PowerShell-based first stage backdoor used by MuddyWater.

Related

Uses · MITRE ATT&CK (27)

  • T1685 Disable or Modify Tools technique
  • T1027.016 Junk Code Insertion sub-technique
  • T1027.010 Command Obfuscation sub-technique
  • T1059.007 JavaScript sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1090.002 External Proxy sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1087.001 Local Account sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1559.001 Component Object Model sub-technique
  • T1559.002 Dynamic Data Exchange sub-technique
  • T1036.004 Masquerade Task or Service sub-technique
  • T1070.004 File Deletion sub-technique
  • T1218.005 Mshta sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1005 Data from Local System technique
  • T1016 System Network Configuration Discovery technique
  • T1029 Scheduled Transfer technique
  • T1033 System Owner/User Discovery technique
  • T1047 Windows Management Instrumentation technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1113 Screen Capture technique

Referenced by MITRE ATT&CK · uses (1)

References