Search/Clambling
● Malware

Clambling

Clambling is a modular backdoor written in C++ that has been used by Threat Group-3390 since at least 2017.

View graph Watch Export
Indicators tracked
0
Intelligence Reports10
10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
35 relationships
T1113: Screen Capture
source
T1033: System Owner/User Discovery
source
T1056.001: Keylogging
source
T1548.002: Bypass User Account Control
source
T1204.002: Malicious File
source
T1543.003: Windows Service
source
T1566.001: Spearphishing Attachment
source
T1574.001: DLL
source
T1115: Clipboard Data
source
T1135: Network Share Discovery
source
T1082: System Information Discovery
source
T1071: Application Layer Protocol
source
T1005: Data from Local System
source
T1140: Deobfuscate/Decode Files or Information
source
T1055: Process Injection
source
T1497.003: Time Based Checks
source
T1112: Modify Registry
source
T1125: Video Capture
source
T1016: System Network Configuration Discovery
source
T1083: File and Directory Discovery
source
T1057: Process Discovery
source
T1059.001: PowerShell
source
T1547.001: Registry Run Keys / Startup Folder
source
T1055.012: Process Hollowing
source
T1027: Obfuscated Files or Information
source
T1102.002: Bidirectional Communication
source
T1567.002: Exfiltration to Cloud Storage
source
T1095: Non-Application Layer Protocol
source
T1012: Query Registry
source
T1059.003: Windows Command Shell
source
T1071.001: Web Protocols
source
T1564.001: Hidden Files and Directories
source
T1569.002: Service Execution
source
T1124: System Time Discovery
source