Malware: MURKYTOP

Description

[MURKYTOP](https://attack.mitre.org/software/S0233) is a reconnaissance tool used by [Leviathan](https://attack.mitre.org/groups/G0065). (Citation: FireEye Periscope March 2018)

External References

• mitre-attack
• FireEye Periscope March 2018

Techniques Used by This Malware

• T1018 — Remote System Discovery
• T1046 — Network Service Discovery
• T1053.002 — At
• T1059.003 — Windows Command Shell
• T1069 — Permission Groups Discovery
• T1070.004 — File Deletion
• T1082 — System Information Discovery
• T1087.001 — Local Account
• T1135 — Network Share Discovery

APT Groups Using This Malware

• Leviathan