Netskope Threat Labs

Small Sieve

ATP Sandbox Adv. Heuristics

Stats

First seen
May 2022
Last seen
September 2026

MITRE ATT&CK techniques

13 techniques across 5 tactics.

TA0002 Execution

TA0003 Persistence

  • T1547Boot or Logon Autostart Execution

TA0005 Stealth

  • T1027Obfuscated Files or Information
  • T1036Masquerading
    • T1036.005Match Legitimate Resource Name or Location
  • T1480Execution Guardrails

TA0007 Discovery

  • T1016System Network Configuration Discovery
  • T1033System Owner/User Discovery

TA0011 Command and Control

Associated groups

Alert name variants

Alert Name
Win32.Trojan.Smallsieve
Win64.Backdoor.Smallsieve

Related families

InvisiMoleBazarEmpirePlugXPUBLOAD