Search/Valak
● Malware

Valak

Valak is a multi-stage modular malware that can function as a standalone information stealer or downloader, first observed in 2019 targeting enterprises in the US and Germany.

View graph Watch Export
Indicators tracked
0
Intelligence Reports20
20 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
36 relationships
T1053.005: Scheduled Task
source
T1047: Windows Management Instrumentation
source
T1113: Screen Capture
source
T1027.011: Fileless Storage
source
T1033: System Owner/User Discovery
source
T1132.001: Standard Encoding
source
T1059.007: JavaScript
source
T1087.002: Domain Account
source
T1559.002: Dynamic Data Exchange
source
T1204.002: Malicious File
source
T1087.001: Local Account
source
T1566.002: Spearphishing Link
source
T1566.001: Spearphishing Attachment
source
T1119: Automated Collection
source
T1552.002: Credentials in Registry
source
T1082: System Information Discovery
source
T1140: Deobfuscate/Decode Files or Information
source
T1112: Modify Registry
source
T1016: System Network Configuration Discovery
source
T1104: Multi-Stage Channels
source
T1057: Process Discovery
source
T1041: Exfiltration Over C2 Channel
source
T1059.001: PowerShell
source
T1027: Obfuscated Files or Information
source
T1114.002: Remote Email Collection
source
T1218.010: Regsvr32
source
T1012: Query Registry
source
T1518.001: Security Software Discovery
source
T1555.004: Windows Credential Manager
source
T1027.002: Software Packing
source
T1071.001: Web Protocols
source
T1105: Ingress Tool Transfer
source
T1008: Fallback Channels
source
T1564.004: NTFS File Attributes
source