MITRE ATT&CKsoftware (malware)
S1232 SplatDropper
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2025-09-12
Description
SplatDropper is a loader that utilizes native windows API to deliver its payload to the victim environment. SplatDropper has been delivered through RAR archives and used legitimate executable for DLL side-loading. SplatDropper is known to be leveraged by Mustang Panda and was first observed utilized in 2025.
Related
Uses · MITRE ATT&CK (8)
- T1027.013 Encrypted/Encoded File sub-technique
- T1027.007 Dynamic API Resolution sub-technique
- T1070.009 Clear Persistence sub-technique
- T1574.001 DLL sub-technique
- T1553.002 Code Signing sub-technique
- T1543.003 Windows Service sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1106 Native API technique
Referenced by MITRE ATT&CK · uses (1)
- G0129 Mustang Panda group