POWERSTATS

ATP Sandbox Adv. Heuristics

Stats

First seen: April 2022
Last seen: October 2026

MITRE ATT&CK techniques

27 techniques across 7 tactics.

TA0002 Execution

T1047Windows Management Instrumentation
T1053Scheduled Task/Job
- T1053.005Scheduled Task
T1059Command and Scripting Interpreter
- T1059.001PowerShell
- T1059.005Visual Basic
- T1059.007JavaScript
T1559Inter-Process Communication
- T1559.001Component Object Model
- T1559.002Dynamic Data Exchange

TA0005 Stealth

T1027Obfuscated Files or Information
- T1027.010Command Obfuscation
- T1027.016Junk Code Insertion
T1036Masquerading
- T1036.004Masquerade Task or Service
T1070Indicator Removal
- T1070.004File Deletion
T1140Deobfuscate/Decode Files or Information
T1218System Binary Proxy Execution
- T1218.005Mshta

TA0007 Discovery

T1016System Network Configuration Discovery
T1033System Owner/User Discovery
T1057Process Discovery
T1082System Information Discovery
T1087Account Discovery
- T1087.001Local Account
T1518Software Discovery
- T1518.001Security Software Discovery

TA0009 Collection

T1005Data from Local System
T1113Screen Capture

TA0011 Command and Control

T1090Proxy
- T1090.002External Proxy
T1105Ingress Tool Transfer
T1132Data Encoding
- T1132.001Standard Encoding
T1573Encrypted Channel
- T1573.002Asymmetric Cryptography

TA0010 Exfiltration

T1029Scheduled Transfer

TA0112 Defense Impairment

T1685Disable or Modify Tools

Associated groups

G0069MuddyWater

Alert name variants

Alert Name	Engine
Document-Word.Trojan.Powermud	ATP Sandbox Adv. Heuristics
Script-Macro.Trojan.Powermud	ATP Sandbox Adv. Heuristics

Related blogs

Netskope Threat Labs Stats for March 2024

April 23, 20244 min read

Netskope Threat Labs Stats for February 2024

March 25, 20244 min read

Netskope Threat Labs Stats for January 2024

February 19, 20244 min read

Netskope Threat Labs Stats for December 2023

January 22, 20245 min read

Netskope Threat Labs Stats for November 2023

December 19, 20236 min read

Netskope Threat Labs Stats for October 2023

November 16, 20235 min read

Netskope Threat Labs Stats for September 2023

Netskope Threat Labs Stats for September 2023

October 18, 20236 min read

Netskope Threat Labs Stats for August 2023

September 11, 20236 min read

Netskope Threat Labs Stats for July 2023

August 8, 20236 min read

Netskope Threat Labs Stats for June 2023

Netskope Threat Labs Stats for June 2023

July 13, 20235 min read

Related families

QakBot Bazar InvisiMole Valak Agent Tesla