216.73.217.172

SampleCheck5000

The MITRE Corporation · Published 25/11/2024 20:14 · Modified 27/03/2026 01:05 Family

Essential information

Confidence
100/100
Is family
Yes
Published
25/11/2024 20:14
Modified
27/03/2026 01:05
Revoked
No
Author / Source
The MITRE Corporation
Related entities
37 attack patterns (mitre), 1 intrusion sets (apt), 7 sectors, 3 countries, 1 indicators, 1 campaign, 1 campaigns

Aliases

SC5k

Description

[SampleCheck5000](https://attack.mitre.org/software/S1168) is a downloader with multiple variants that was used by [OilRig](https://attack.mitre.org/groups/G0049) including during the [Outer Space](https://attack.mitre.org/campaigns/C0042) campaign to download and execute additional payloads. (Citation: ESET OilRig Campaigns Sep 2023)(Citation: ESET OilRig Downloaders DEC 2023)

Marking (TLP)

TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references