NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/POWERSTATS
● Malware

POWERSTATS

POWERSTATS is a PowerShell-based first stage backdoor used by MuddyWater.

View graph Watch Export
Indicators tracked
0
Intelligence Reports30
30 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
29 relationships
T1053.005: Scheduled Task
source
T1047: Windows Management Instrumentation
source
T1113: Screen Capture
source
T1033: System Owner/User Discovery
source
T1132.001: Standard Encoding
source
T1059.007: JavaScript
source
T1559.002: Dynamic Data Exchange
source
T1087.001: Local Account
source
T1559.001: Component Object Model
source
T1082: System Information Discovery
source
T1005: Data from Local System
source
T1140: Deobfuscate/Decode Files or Information
source
T1029: Scheduled Transfer
source
T1027.016: Junk Code Insertion
source
T1090.002: External Proxy
source
T1016: System Network Configuration Discovery
source
T1036.004: Masquerade Task or Service
source
T1218.005: Mshta
source
T1057: Process Discovery
source
T1059.001: PowerShell
source
T1685: Disable or Modify Tools
source
T1573.002: Asymmetric Cryptography
source
T1518.001: Security Software Discovery
source
T1027.010: Command Obfuscation
source
T1070.004: File Deletion
source
T1059.005: Visual Basic
source
T1105: Ingress Tool Transfer
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon