Movatterモバイル変換

[0]ホーム
URL:

  1. Home
  2. Software
  3. Peppy

Peppy

Peppy is a Python-based remote access Trojan, active since at least 2012, with similarities toCrimson.[1]

ID: S0643
ⓘ
Type: MALWARE
ⓘ
Platforms: Windows
Version: 1.0
Created: 07 September 2021
Last Modified: 25 April 2025
Enterprise Layer
downloadview

Techniques Used

DomainIDNameUse
EnterpriseT1071.001Application Layer Protocol:Web Protocols

Peppy can use HTTP to communicate with C2.[1]

EnterpriseT1020Automated Exfiltration

Peppy has the ability to automatically exfiltrate files and keylogs.[1]

EnterpriseT1059.003Command and Scripting Interpreter:Windows Command Shell

Peppy has the ability to execute shell commands.[1]

EnterpriseT1083File and Directory Discovery

Peppy can identify specific files for exfiltration.[1]

EnterpriseT1105Ingress Tool Transfer

Peppy can download and execute remote files.[1]

EnterpriseT1056.001Input Capture:Keylogging

Peppy can log keystrokes on compromised hosts.[1]

EnterpriseT1113Screen Capture

Peppy can take screenshots on targeted systems.[1]

Groups That Use This Software

References

×
[8]ページ先頭
©2009-2026 Movatter.jp