MITRE ATT&CKsoftware (malware)

S1024 CreepySnail

Published 2022-07-08 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2022-07-08

Description

CreepySnail is a custom PowerShell implant that has been used by POLONIUM since at least 2022.

Related

Uses · MITRE ATT&CK (7)

  • T1071.001 Web Protocols sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1078.002 Domain Accounts sub-technique
  • T1059.001 PowerShell sub-technique
  • T1016 System Network Configuration Discovery technique
  • T1033 System Owner/User Discovery technique
  • T1041 Exfiltration Over C2 Channel technique

Referenced by MITRE ATT&CK · uses (1)

References