Statements (21)
| Predicate | Object |
|---|---|
| gptkbp:instanceOf |
malware
|
| gptkbp:abilities |
file upload
command execution screenshot capture file download keylogging |
| gptkbp:alias |
POWERTON
PowerShell RAT |
| gptkbp:associatedWith |
Iranian cyber espionage
|
| gptkbp:C2Communication |
gptkb:DNS
gptkb:HTTP |
| gptkbp:deliveredBy |
phishing email
malicious document |
| gptkbp:firstObserved |
2017
|
| https://www.w3.org/2000/01/rdf-schema#label |
POWERSTATS backdoor
|
| gptkbp:platform |
gptkb:Windows
|
| gptkbp:programmingLanguage |
gptkb:PowerShell
|
| gptkbp:type |
Trojan
|
| gptkbp:usedBy |
gptkb:APT34
|
| gptkbp:bfsParent |
gptkb:MuddyWater_PowerShell_Backdoor
|
| gptkbp:bfsLayer |
7
|