Engima Stealer
AlienVault
· Published 20/12/2025 19:38 · Modified 20/12/2025 23:34
Essential information
- Confidence
- 100/100
- Is family
- No
- Published
- 20/12/2025 19:38
- Modified
- 20/12/2025 23:34
- Revoked
- No
- Author / Source
- AlienVault
- Related entities
- 14 attack patterns (mitre), 13 indicators, 1 vulnerabilities (cve)
Description
No description.
Marking (TLP)
TLP:CLEAR
Related entities
Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.
Attack patterns (MITRE) (14)
-
T1124 usesSystem Time Discovery MITRE
-
T1106 usesNative API MITRE
-
T1056 usesInput Capture MITRE
-
T1218 usesSystem Binary Proxy Execution MITRE
-
T1127 usesTrusted Developer Utilities Proxy Execution MITRE
-
T1053 usesScheduled Task/Job MITRE
-
T1112 usesModify Registry MITRE
-
T1560 usesArchive Collected Data MITRE
-
T1574 usesHijack Execution Flow MITRE
-
Multi-Stage Channels usesT1104 MITRE
-
T1134 usesAccess Token Manipulation MITRE
-
T1040 usesNetwork Sniffing MITRE
Indicators (13)
-
stix 100/100 Revoked· Valid until 14/05/2024 · Source: AlienVault
Vulnerabilities (CVE) (1)
7.8
High
Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).
- Attack vector
- LOCAL
- Complexity
- LOW
- Published
- 09/08/2017
- Modified
- 22/04/2026