PULSECHECK

Malware & Tools · PULSECHECK

· MalwareS1108 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Network Devices, Linux

Description

PULSECHECK is a web shell written in Perl that was used by APT5 as early as 2020 including against Pulse Secure VPNs at US Defense Industrial Base (DIB) companies.(Citation: Mandiant Pulse Secure Zero-Day April 2021)

Tactic Coverage

command and control (2)execution (1)persistence (1)

Used By (1 groups)

G1023APT5Mulberry Typhoon, MANGANESE

Techniques (4)

T1059.004Unix Shell

execution

T1071.001Web Protocols

command and control

T1132.001Standard Encoding

command and control

T1505.003Web Shell

persistence

References

https://attack.mitre.org/software/S1108 https://www.mandiant.com/resources/blog/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day