bugsleepMalware
- MuddyRot
Last reported 4 months ago, by Sekoia.io1 report
ATT&CK techniques
1 technique · each with the sentence it comes from- T1053.005Scheduled Task
“MuddyRot is a C x64 implant offering a reverse shell, file transfer and scheduled-task persistence over a raw TCP socket on port 443.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
MuddyWater replaces Atera by custom MuddyRot implant“MuddyWater replaces Atera by custom MuddyRot implant”
Indicators in its reports
named in the reports above- 94278fa01900fdbf…3e5b7130c472in 1 report
- b8703744744555ad…f5f9095fbfcain 1 report
- 73c677dd3b264e7e…db52b9c6b30ein 1 report
- 960d4c9e79e751be…e41c96ba5809in 1 report
- 91.235.234[.]202in 1 report
- 146.19.143[.]14in 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.