Caminho

Malware & Tools · Caminho

· MalwareS9016 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Caminho is a downloader that has been used by threat actors since at least 2025 to deliver various strains of malware such as XWorm.(Citation: Zscaler BlindEagle DEC 2025)

Tactic Coverage

stealth (4)privilege escalation (1)command and control (1)execution (1)

Used By (1 groups)

G0099APT-C-36Blind Eagle, TAG-144

Techniques (6)

T1027.001Binary Padding

stealth

T1027.013Encrypted/Encoded File

stealth

T1055.012Process Hollowing

stealthprivilege escalation

T1105Ingress Tool Transfer

command and control

T1106Native API

execution

T1140Deobfuscate/Decode Files or Information

stealth

References

https://attack.mitre.org/software/S9016 https://www.zscaler.com/blogs/security-research/blindeagle-targets-colombian-government-agency-caminho-and-dcrat