StatsFirst seenFebruary 2023Last seenSeptember 2026MITRE ATT&CK techniques3 techniques across 3 tactics.TA0003 PersistenceT1543Create or Modify System ProcessT1543.003Windows ServiceTA0005 StealthT1036MasqueradingT1036.004Masquerade Task or ServiceTA0011 Command and ControlT1105Ingress Tool TransferAssociated groupsG0039SuckflyAlert name variantsAlert NameEngineWin32.Backdoor.NidiranATP Sandbox Adv. HeuristicsRelated familiesKwampirsPlugXStrongPityTONESHELLVolgmer