216.73.217.22

SparkKitty

AlienVault · Published 21/12/2025 15:06 · Modified 21/12/2025 15:06

Essential information

Confidence
100/100
Is family
No
Published
21/12/2025 15:06
Modified
21/12/2025 15:06
Revoked
No
Author / Source
AlienVault
Related entities
25 attack patterns (mitre), 1 countries, 67 indicators, 2 reports

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.

Attack patterns (MITRE) (25)

  • T1132.001 uses
    Standard Encoding
  • T1070.004 uses
    File Deletion
  • T1528 uses
    Steal Application Access Token
  • T1566 uses
    Phishing
  • T1204.002 uses
    Malicious File
  • T1553 uses
    Subvert Trust Controls
  • T1539 uses
    Steal Web Session Cookie
  • T1036.001 uses
    Invalid Code Signature
  • T1608 uses
    Stage Capabilities
  • T1036 uses
    Masquerading
  • T1140 uses
    Deobfuscate/Decode Files or Information
  • T1055.001 uses
    Dynamic-link Library Injection
  • T1056.002 uses
    GUI Input Capture
  • T1055 uses
    Process Injection
  • T1555 uses
    Credentials from Password Stores
  • T1027 uses
    Obfuscated Files or Information
  • T1497 uses
    Virtualization/Sandbox Evasion
  • T1176 uses
    Software Extensions
  • T1036.005 uses
    Match Legitimate Resource Name or Location
  • T1041 uses
    Exfiltration Over C2 Channel
  • T1106 uses
    Native API
  • T1071.001 uses
    Web Protocols
  • T1534 uses
    Internal Spearphishing
  • T1573 uses
    Encrypted Channel
  • T1056 uses
    Input Capture

Countries (1)

  • China targets

Indicators (67)

Reports (2)