POORAIM

· MalwareS0216 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

POORAIM is a backdoor used by APT37 in campaigns since at least 2014. (Citation: FireEye APT37 Feb 2018)

Tactic Coverage

discovery (3)command and control (1)collection (1)initial access (1)

Used By (1 groups)

Techniques (6)

T1057Process Discovery

discovery

T1082System Information Discovery

discovery

T1083File and Directory Discovery

discovery

T1102.002Bidirectional Communication

command and control

T1113Screen Capture

collection

T1189Drive-by Compromise

initial access

References