MITRE ATT&CKsoftware (malware)

S1163 SnappyTCP

Published 2024-11-20 Modified 2025-01-07 Official page ↗

Domain: enterprise
Platforms: Linux
Version: 1.0
Created: 2024-11-20

Description

SnappyTCP is a web shell used by Sea Turtle between 2021 and 2023 against multiple victims. SnappyTCP appears to be based on a public GitHub project that has since been removed from the code-sharing site. SnappyTCP includes a simple reverse TCP shell for Linux and Unix environments with basic command and control capabilities.

Uses · MITRE ATT&CK (5)

T1573.002 Asymmetric Cryptography sub-technique
T1071.001 Web Protocols sub-technique
T1059.004 Unix Shell sub-technique
T1505.003 Web Shell sub-technique
T1095 Non-Application Layer Protocol technique

Referenced by MITRE ATT&CK · uses (1)

G1041 Sea Turtle group

References

https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/tortoise-and-malwahare.html PWC Sea Turtle 2023

S1163 SnappyTCP

Description

Related

Uses · MITRE ATT&CK (5)

Referenced by MITRE ATT&CK · uses (1)

References