MITRE ATT&CKsoftware (malware)

S1206 JumbledPath

Published 2025-02-25 Modified 2025-04-15 Official page ↗
Domain
enterprise
Platforms
Network Devices
Version
1.0
Created
2025-02-25

Description

JumbledPath is a custom-built utility written in GO that has been used by Salt Typhoon since at least 2024 for packet capture on remote Cisco devices. JumbledPath is compiled as an ELF binary using x86-64 architecture which makes it potentially useable across Linux operating systems and network devices from multiple vendors.

Related

Uses · MITRE ATT&CK (6)

  • T1685 Disable or Modify Tools technique
  • T1685.006 Clear Linux or Mac System Logs sub-technique
  • T1665 Hide Infrastructure technique
  • T1560 Archive Collected Data technique
  • T1040 Network Sniffing technique
  • T1104 Multi-Stage Channels technique

Referenced by MITRE ATT&CK · uses (1)

  • G1045 Salt Typhoon group

References