Netskope Threat Labs

Clambling

ATP Sandbox Adv. Heuristics

Stats

First seen
May 2022
Last seen
September 2026

MITRE ATT&CK techniques

34 techniques across 10 tactics.

TA0001 Initial Access

TA0002 Execution

TA0003 Persistence

  • T1543Create or Modify System Process
  • T1547Boot or Logon Autostart Execution

TA0004 Privilege Escalation

  • T1548Abuse Elevation Control Mechanism

TA0005 Stealth

TA0007 Discovery

  • T1012Query Registry
  • T1016System Network Configuration Discovery
  • T1033System Owner/User Discovery
  • T1057Process Discovery
  • T1082System Information Discovery
  • T1083File and Directory Discovery
  • T1124System Time Discovery
  • T1135Network Share Discovery

TA0009 Collection

TA0011 Command and Control

TA0010 Exfiltration

  • T1567Exfiltration Over Web Service

TA0112 Defense Impairment

Associated groups

Alert name variants

Alert Name
Document-Office.Trojan.Clambling
Win32.Backdoor.Clambling
Win32.Trojan.Clambling
Win64.Backdoor.Clambling
Win64.Trojan.Clambling

Related families

InvisiMoleQakBotEmpirePlugXCobalt Strike