Pisloader

Pisloader is a malware family that is notable due to its use of DNS as a C2 protocol as well as its use of anti-analysis tactics. It has been used by APT18 and is similar to another malware family, HTTPBrowser, that has been used by the group.

View graph Watch Export

Indicators tracked

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

10 relationships

T1132.001: Standard Encoding

source

T1071.004: DNS

source

T1082: System Information Discovery

source

T1016: System Network Configuration Discovery

source

T1083: File and Directory Discovery

source

T1547.001: Registry Run Keys / Startup Folder

source

T1027: Obfuscated Files or Information

source

T1059.003: Windows Command Shell

source

T1105: Ingress Tool Transfer

source