MITRE ATT&CKsoftware (malware)

S1173 PowerExchange

Published 2024-11-27 Modified 2024-11-27 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-11-27

Description

PowerExchange is a PowerShell backdoor that has been used by OilRig since at least 2023 including against government targets in the Middle East.

Related

Uses · MITRE ATT&CK (5)

  • T1071.003 Mail Protocols sub-technique
  • T1059.001 PowerShell sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1041 Exfiltration Over C2 Channel technique
  • T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

References