MITRE ATT&CKsoftware (malware)
S1012 PowerLess
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2022-06-01
Description
PowerLess is a PowerShell-based modular backdoor that has been used by Magic Hound since at least 2022.
Related
Uses · MITRE ATT&CK (9)
- T1573 Encrypted Channel technique
- T1074.001 Local Data Staging sub-technique
- T1059.001 PowerShell sub-technique
- T1560 Archive Collected Data technique
- T1056.001 Keylogging sub-technique
- T1217 Browser Information Discovery technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1005 Data from Local System technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0059 Magic Hound group
References
- https://www.cybereason.com/blog/research/powerless-trojan-iranian-apt-phosphorus-adds-new-powershell-backdoor-for-espionage Cybereason PowerLess February 2022