SYSCON

ATP Sandbox Adv. Heuristics

Stats

First seen: May 2022
Last seen: September 2026

MITRE ATT&CK techniques

5 techniques across 3 tactics.

TA0002 Execution

T1059Command and Scripting Interpreter
- T1059.003Windows Command Shell
T1204User Execution
- T1204.002Malicious File

TA0007 Discovery

T1057Process Discovery
T1082System Information Discovery

TA0011 Command and Control

T1071Application Layer Protocol
- T1071.002File Transfer Protocols

Associated campaigns

C0006Operation Honeybee

Alert name variants

Alert Name	Engine
Document-Word.Trojan.Syscon	ATP Sandbox Adv. Heuristics
Win32.Backdoor.Syscon	ATP Sandbox Adv. Heuristics
Win32.Trojan.Syscon	ATP Sandbox Adv. Heuristics

Related families

Havoc Qilin Bisonal Clambling DarkGate