PS1
- ID
- S0613
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 11 Apr 2024
PS1 is a loader that was used to deploy 64-bit backdoors in the CostaRicto campaign.[1]
Techniques used (5)
- T1027.013 Encrypted/Encoded File
- T1055.001 Dynamic-link Library Injection
- T1059.001 PowerShell
- T1105 Ingress Tool Transfer
- T1140 Deobfuscate/Decode Files or Information