Search/EnvyScout

● Malware

EnvyScout

EnvyScout is a dropper that has been used by APT29 since at least 2021.

View graph Watch Export

Indicators tracked

0

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

15 relationships

T1218.011: Rundll32

T1027.013: Encrypted/Encoded File

T1059.007: JavaScript

T1204.002: Malicious File

T1566.001: Spearphishing Attachment

T1082: System Information Discovery

T1005: Data from Local System

T1140: Deobfuscate/Decode Files or Information

T1036: Masquerading

T1480: Execution Guardrails

T1187: Forced Authentication

T1059.003: Windows Command Shell

T1027.006: HTML Smuggling

T1564.001: Hidden Files and Directories