Netskope Threat Labs

DomainToolMarte

ATP Sandbox Adv. Heuristics

DomainToolMarte is a detection for domain reconnaissance components associated with the Marte framework, a modular infection framework that delivers credential theft tools such as Mimikatz.

First seen
November 2023
Last seen
October 2026
Alert Name
Binary.Trojan.DomainToolMarte
Script-PowerShell.Trojan.DomainToolMarte
Script.Trojan.DomainToolMarte
Text.Trojan.DomainToolMarte