S1046Windows

S1046PowGoop

Platforms
1
ATT&CK
14.1
References
3

Description

[PowGoop](https://attack.mitre.org/software/S1046) is a loader that consists of a DLL loader and a PowerShell-based downloader; it has been used by [MuddyWater](https://attack.mitre.org/groups/G0069) as their main loader.(Citation: DHS CISA AA22-055A MuddyWater February 2022)(Citation: CYBERCOM Iranian Intel Cyber January 2022)

Platforms· 1

Windows

Attributed to1

TypeTargetConfidenceTier
GroupMuddyWaterg006995%live

References

  1. https://attack.mitre.org/software/S1046
  2. https://www.cybercom.mil/Media/News/Article/2897570/iranian-intel-cyber-suite-of-malware-uses-open-source-tools/
  3. https://www.cisa.gov/uscert/ncas/alerts/aa22-055a

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
PowerPunch
Software
Mori
Software
StrifeWater
Software
PowerLess
Software
Goopy
Software
POWERSTATS
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.