MITRE ATT&CKsoftware (malware)

S1049 SUGARUSH

Published 2022-10-04 Modified 2025-10-22 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2022-10-04

Description

SUGARUSH is a small custom backdoor that can establish a reverse shell over TCP to a hard coded C2 address. SUGARUSH was first identified during analysis of UNC3890's C0010 campaign targeting Israeli companies, which began in late 2020.

Related

Uses · MITRE ATT&CK (6)

  • T1680 Local Storage Discovery technique
  • T1016.001 Internet Connection Discovery sub-technique
  • T1571 Non-Standard Port technique
  • T1059.003 Windows Command Shell sub-technique
  • T1543.003 Windows Service sub-technique
  • T1095 Non-Application Layer Protocol technique

Referenced by MITRE ATT&CK · uses (1)

References