Peppy

Malware & Tools · Peppy

· MalwareS0643 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Peppy is a Python-based remote access Trojan, active since at least 2012, with similarities to Crimson.(Citation: Proofpoint Operation Transparent Tribe March 2016)

Tactic Coverage

collection (2)command and control (2)exfiltration (1)credential access (1)execution (1)discovery (1)

Used By (1 groups)

G0134Transparent TribeCOPPER FIELDSTONE, APT36

Techniques (7)

T1020Automated Exfiltration

exfiltration

T1056.001Keylogging

collectioncredential access

T1059.003Windows Command Shell

execution

T1071.001Web Protocols

command and control

T1083File and Directory Discovery

discovery

T1105Ingress Tool Transfer

command and control

References

https://attack.mitre.org/software/S0643 https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf