KOPILUWAK
- ID
- S1075
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 17 Apr 2025
KOPILUWAK is a JavaScript-based reconnaissance tool that has been used for victim profiling and C2 since at least 2017.[1]
Techniques used (13)
- T1005 Data from Local System
- T1016 System Network Configuration Discovery
- T1033 System Owner/User Discovery
- T1041 Exfiltration Over C2 Channel
- T1049 System Network Connections Discovery
- T1057 Process Discovery
- T1059.007 JavaScript
- T1071.001 Web Protocols
- T1074.001 Local Data Staging
- T1135 Network Share Discovery
- T1204.002 Malicious File
- T1566.001 Spearphishing Attachment
- T1680 Local Storage Discovery