MITRE ATT&CKsoftware (malware)

S9016 Caminho

Published 2026-04-16 Modified 2026-05-12 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
VMDetectLoader
Version
1.0
Created
2026-04-16

Description

Caminho is a downloader that has been used by threat actors since at least 2025 to deliver various strains of malware such as XWorm.

Related

Uses · MITRE ATT&CK (6)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1027.001 Binary Padding sub-technique
  • T1055.012 Process Hollowing sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique

Referenced by MITRE ATT&CK · uses (1)

References