Search/ROAMINGHOUSE

● Malware

ROAMINGHOUSE

ROAMINGHOUSE is a dropper malware used by MirrorFace to extract and execute embedded payloads including UPPERCUT components.

View graph Watch Export

Indicators tracked

0

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

12 relationships

T1047: Windows Management Instrumentation

T1027.013: Encrypted/Encoded File

T1204.002: Malicious File

T1566.002: Spearphishing Link

T1140: Deobfuscate/Decode Files or Information

T1137.001: Office Template Macros

T1480: Execution Guardrails

T1497.002: User Activity Based Checks

T1518.001: Security Software Discovery

T1204.001: Malicious Link