MITRE ATT&CKsoftware (malware)
S1186 Line Dancer
- Domain
- enterprise
- Platforms
- Network Devices
- Version
- 1.0
- Created
- 2025-01-06
Description
Line Dancer is a memory-only Lua-based shellcode loader associated with the ArcaneDoor campaign. Line Dancer allows an adversary to upload and execute arbitrary shellcode on victim devices.
Related
Uses · MITRE ATT&CK (9)
- T1690 Prevent Command History Logging technique
- T1653 Power Settings technique
- T1059.008 Network Device CLI sub-technique
- T1071.001 Web Protocols sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1014 Rootkit technique
- T1040 Network Sniffing technique
- T1041 Exfiltration Over C2 Channel technique
- T1082 System Information Discovery technique
Referenced by MITRE ATT&CK · uses (1)
- C0046 ArcaneDoor campaign