MITRE ATT&CK / Software / S0063

SHOTPUT

ID

S0063

Type

Malware

Associated names

Backdoor.APT.CookieCutter, Pirpi

Platforms

Windows

Source

attack.mitre.org

MITRE last modified

25 Apr 2025

Techniques used (6)

• T1018 Remote System Discovery
• T1027 Obfuscated Files or Information
• T1049 System Network Connections Discovery
• T1057 Process Discovery
• T1083 File and Directory Discovery
• T1087.001 Local Account

Groups using it (1)

• G0022 APT3

References

1. FireEye Clandestine Wolf