S0459Windows

S0459MechaFlounder

Platforms
1
ATT&CK
14.1
References
2

Description

[MechaFlounder](https://attack.mitre.org/software/S0459) is a python-based remote access tool (RAT) that has been used by [APT39](https://attack.mitre.org/groups/G0087). The payload uses a combination of actor developed code and code snippets freely available online in development communities.(Citation: Unit 42 MechaFlounder March 2019)

Platforms· 1

Windows

Attributed to1

TypeTargetConfidenceTier
GroupAPT39g008795%live

References

  1. https://attack.mitre.org/software/S0459
  2. https://unit42.paloaltonetworks.com/new-python-based-payload-mechaflounder-used-by-chafer/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
InnaputRAT
Actor
APT39
Software
Machete
Software
Waterbear
Software
4H RAT
Software
Attor
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.