216.73.217.22

IMPERIAL KITTEN

· Published 21/12/2025 01:51 · Modified 21/12/2025 01:51 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 01:51
Modified
21/12/2025 01:51
Updated at
21/12/2025 01:51
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
20 attack patterns (mitre), 2 malware, 8 sectors, 10 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Attack patterns (MITRE) (20)

  • T1071 uses
    Application Layer Protocol
  • T1105 uses
    Ingress Tool Transfer
  • T1518 uses
    Software Discovery
  • T1055 uses
    Process Injection
  • T1590 uses
    Gather Victim Network Information
  • T1095 uses
    Non-Application Layer Protocol
  • T1005 uses
    Data from Local System
  • T1041 uses
    Exfiltration Over C2 Channel
  • T1102 uses
    Web Service
  • T1119 uses
    Automated Collection
  • T1059 uses
    Command and Scripting Interpreter
  • T1547 uses
    Boot or Logon Autostart Execution
  • T1140 uses
    Deobfuscate/Decode Files or Information
  • Multi-Stage Channels uses
    T1104
  • T1053 uses
    Scheduled Task/Job
  • T1037 uses
    Boot or Logon Initialization Scripts
  • T1003 uses
    OS Credential Dumping
  • T1189 uses
    Drive-by Compromise
  • T1584 uses
    Compromise Infrastructure
  • T1127 uses
    Trusted Developer Utilities Proxy Execution

Malware (2)

  • IMAPLoader
  • StandardKeyboard

Sectors (8)

  • Maritime transport targets
  • Transportation targets
  • Telecommunications targets
  • Energy targets
  • Technology targets
  • Logistics targets
  • Defense targets
  • Consulting targets

Indicators (10)