NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/Netwalker
● Malware

Netwalker

Netwalker is fileless ransomware written in PowerShell and executed directly in memory.

View graph Watch Export
Indicators tracked
0
Intelligence Reports10
10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
22 relationships
T1047: Windows Management Instrumentation
source
T1027.009: Embedded Payloads
source
T1489: Service Stop
source
T1082: System Information Discovery
source
T1106: Native API
source
T1140: Deobfuscate/Decode Files or Information
source
T1112: Modify Registry
source
T1059.001: PowerShell
source
T1486: Data Encrypted for Impact
source
T1685: Disable or Modify Tools
source
T1570: Lateral Tool Transfer
source
T1518.001: Security Software Discovery
source
T1059.003: Windows Command Shell
source
T1027.010: Command Obfuscation
source
T1105: Ingress Tool Transfer
source
T1569.002: Service Execution
source
T1055.001: Dynamic-link Library Injection
source
T1490: Inhibit System Recovery
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon