Machete

ATP Sandbox Adv. HeuristicsAV

Stats

First seen: April 2022
Last seen: September 2026

Also known as

Pyark

MITRE ATT&CK techniques

41 techniques across 8 tactics.

TA0002 Execution

T1053Scheduled Task/Job
- T1053.005Scheduled Task
T1059Command and Scripting Interpreter
- T1059.006Python

TA0003 Persistence

T1547Boot or Logon Autostart Execution
- T1547.001Registry Run Keys / Startup Folder

TA0005 Stealth

T1027Obfuscated Files or Information
- T1027.002Software Packing
- T1027.010Command Obfuscation
T1036Masquerading
- T1036.004Masquerade Task or Service
- T1036.005Match Legitimate Resource Name or Location
T1070Indicator Removal
- T1070.004File Deletion
T1140Deobfuscate/Decode Files or Information
T1564Hide Artifacts
- T1564.001Hidden Files and Directories

TA0006 Credential Access

T1552Unsecured Credentials
- T1552.004Private Keys
T1555Credentials from Password Stores
- T1555.003Credentials from Web Browsers

TA0007 Discovery

T1010Application Window Discovery
T1016System Network Configuration Discovery
- T1016.002Wi-Fi Discovery
T1057Process Discovery
T1082System Information Discovery
T1083File and Directory Discovery
T1120Peripheral Device Discovery
T1217Browser Information Discovery

TA0009 Collection

T1005Data from Local System
T1025Data from Removable Media
T1056Input Capture
- T1056.001Keylogging
T1074Data Staged
- T1074.001Local Data Staging
T1113Screen Capture
T1115Clipboard Data
T1123Audio Capture
T1125Video Capture
T1560Archive Collected Data
- T1560.003Archive via Custom Method
T1560Archive Collected Data
- T1560.003Archive via Custom Method

TA0011 Command and Control

T1008Fallback Channels
T1071Application Layer Protocol
- T1071.002File Transfer Protocols
- T1071.001Web Protocols
T1105Ingress Tool Transfer
T1132Data Encoding
- T1132.001Standard Encoding
T1573Encrypted Channel
- T1573.001Symmetric Cryptography
- T1573.002Asymmetric Cryptography

TA0010 Exfiltration

T1020Automated Exfiltration
T1029Scheduled Transfer
T1041Exfiltration Over C2 Channel
T1052Exfiltration Over Physical Medium
- T1052.001Exfiltration over USB

Associated groups

G0095Machete

Alert name variants

Alert Name	Engine
MacOS.Trojan.Machete	ATP Sandbox Adv. Heuristics
Script-Python.Trojan.Machete	ATP Sandbox Adv. Heuristics
Script-Python.Trojan.Pyark	ATP Sandbox Adv. Heuristics
Trojan.Spy.Machete.B	AV
Win32.Backdoor.Machete	ATP Sandbox Adv. Heuristics
Win32.Trojan.Machete	ATP Sandbox Adv. Heuristics
Win32.Trojan.Pyark	ATP Sandbox Adv. Heuristics

Related families

InvisiMole QakBot KONNI Empire PlugX