S1018Saint Bot

[Saint Bot](https://attack.mitre.org/software/S1018) is a .NET downloader that has been used by [Ember Bear](https://attack.mitre.org/groups/G1003) since at least March 2021.(Citation: Malwarebytes Saint Bot April 2021)(Citation: Palo Alto Unit 42 OutSteel SaintBot February 2022 ) Documented platforms: Windows. Attributed to ATT&CK group: Ember Bear. Catalogued in ATT&CK 14.1. 3 references curated.