VERMIN

ATP Sandbox Adv. Heuristics

Stats

First seen: May 2022
Last seen: September 2026

MITRE ATT&CK techniques

17 techniques across 4 tactics.

TA0005 Stealth

T1027Obfuscated Files or Information
- T1027.002Software Packing
- T1027.013Encrypted/Encoded File
T1070Indicator Removal
- T1070.004File Deletion
T1140Deobfuscate/Decode Files or Information

TA0007 Discovery

T1016System Network Configuration Discovery
T1033System Owner/User Discovery
T1057Process Discovery
T1082System Information Discovery
T1518Software Discovery
- T1518.001Security Software Discovery

TA0009 Collection

T1056Input Capture
- T1056.001Keylogging
T1113Screen Capture
T1115Clipboard Data
T1119Automated Collection
T1123Audio Capture
T1560Archive Collected Data

TA0011 Command and Control

T1071Application Layer Protocol
- T1071.001Web Protocols
T1105Ingress Tool Transfer

Alert name variants

Alert Name	Engine
ByteCode-MSIL.Backdoor.Vermin	ATP Sandbox Adv. Heuristics
ByteCode-MSIL.Trojan.Vermin	ATP Sandbox Adv. Heuristics

Related families

KONNI Metamorfo Machete InvisiMole Empire