Search/Kwampirs
● Malware

Kwampirs

Kwampirs is a backdoor Trojan used by Orangeworm. Kwampirs has been found on machines which had software installed for the use and control of high-tech imaging devices such as X-Ray and MRI machines. Kwampirs has multiple technical overlaps with Shamoon based on reverse engineering analysis.

View graph Watch Export
Indicators tracked
0
Intelligence Reports20
20 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
23 relationships
T1033: System Owner/User Discovery
source
T1218.011: Rundll32
source
T1027.013: Encrypted/Encoded File
source
T1087.001: Local Account
source
T1543.003: Windows Service
source
T1069.002: Domain Groups
source
T1007: System Service Discovery
source
T1135: Network Share Discovery
source
T1082: System Information Discovery
source
T1140: Deobfuscate/Decode Files or Information
source
T1021.002: SMB/Windows Admin Shares
source
T1027.001: Binary Padding
source
T1016: System Network Configuration Discovery
source
T1083: File and Directory Discovery
source
T1036.004: Masquerade Task or Service
source
T1049: System Network Connections Discovery
source
T1057: Process Discovery
source
T1069.001: Local Groups
source
T1201: Password Policy Discovery
source
T1018: Remote System Discovery
source
T1105: Ingress Tool Transfer
source
T1008: Fallback Channels
source