POWERSTATSMalware
- powermud
- valyria
POWERSTATS is a backdoor written in powershell. It has the ability to disable Microsoft Office Protected View, fingerprint the victim and receive commands.From MISP Galaxy
Last reported 7 years ago, by Group-IB1 report
What the reports say
1 report, newest first · the exact sentence from each-
Catching fish in muddy waters“The group used a proprietary PowerShell backdoor called POWERSTATS.”
Indicators in its reports
named in the reports above- gladiyator[.]tkin 1 report
- 94.23.148[.]194in 1 report
- 192.95.21[.]28in 1 report
- 46.105.84[.]146in 1 report
- 185.162.235[.]182in 1 report
- 09aabd2613d339d90ddbd4b7c09195a9in 1 report
- cfa845995b851aacdf40b8e6a5b87ba7in 1 report
- a61b268e9bc9b7e6c9125cdbfb1c422ain 1 report
- f12bab5541a7d8ef4bbca81f6fc835a3in 1 report
- a066f5b93f4ac85e9adfe5ff3b10bc28in 1 report
- 8a004e93d7ee3b26d94156768bc0839din 1 report
- 0638adf8fb4095d60fbef190a759aa9ein 1 report
- eed599981c097944fa143e7d7f7e17b1in 1 report
- 21aebece73549b3c4355a6060df410e9in 1 report
- 5c6148619abb10bb3789dcfb32f759a6in 1 report
- aselsan.com[.]trin 1 report
- dideo[.]irin 1 report
- videoi[.]irin 1 report
Copy these 18 indicators · defanged
Thanks — we review every report.