StarProxy
- ID
- S1227
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 22 Oct 2025
StarProxy is custom malware used by Mustang Panda as a post-compromise tool, to enable proxying of traffic between the infected machine and other machines on the same network. [1]
Techniques used (9)
- T1001.003 Protocol or Service Impersonation
- T1059 Command and Scripting Interpreter
- T1090.001 Internal Proxy
- T1095 Non-Application Layer Protocol
- T1106 Native API
- T1124 System Time Discovery
- T1140 Deobfuscate/Decode Files or Information
- T1573.001 Symmetric Cryptography
- T1574.001 DLL