● Malware

MgBot

MgBot is a modular malware framework exclusively associated with Daggerfly operations since at least 2012. MgBot was developed in C++ and features a module design with multiple available plugins that have been under active development through 2024.

View graph Watch Export

Indicators tracked

Intelligence Reports30

30 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

22 relationships

T1033: System Owner/User Discovery

source

T1056.001: Keylogging

source

T1003: OS Credential Dumping

source

T1123: Audio Capture

source

T1539: Steal Web Session Cookie

source

T1025: Data from Removable Media

source

T1087.002: Domain Account

source

T1213.006: Databases

source

T1087.001: Local Account

source

T1115: Clipboard Data

source

T1005: Data from Local System

source

T1555: Credentials from Password Stores

source

T1555.003: Credentials from Web Browsers

source

T1482: Domain Trust Discovery

source

T1057: Process Discovery

source

T1018: Remote System Discovery

source

T1046: Network Service Discovery

source