Netskope Threat Labs

PowerDuke

ATP Sandbox Adv. HeuristicsAV

Stats

First seen
April 2022
Last seen
September 2026

Also known as

Powerduke

MITRE ATT&CK techniques

15 techniques across 6 tactics.

TA0002 Execution

TA0003 Persistence

  • T1547Boot or Logon Autostart Execution

TA0005 Stealth

TA0007 Discovery

  • T1010Application Window Discovery
  • T1016System Network Configuration Discovery
  • T1033System Owner/User Discovery
  • T1057Process Discovery
  • T1082System Information Discovery
  • T1083File and Directory Discovery
  • T1124System Time Discovery

TA0011 Command and Control

  • T1105Ingress Tool Transfer

TA0040 Impact

Associated groups

Alert name variants

Alert Name
Gen:Variant.PowerDuke.1
Win32.Trojan.Powerduke

Related families

InvisiMoleQakBotLatrodectusBazarBisonal