Tool: Out1

Description

[Out1](https://attack.mitre.org/software/S0594) is a remote access tool written in python and used by [MuddyWater](https://attack.mitre.org/groups/G0069) since at least 2021.(Citation: Trend Micro Muddy Water March 2021)

External References

• mitre-attack
• Trend Micro Muddy Water March 2021

Techniques Used by This Tool

• T1005 — Data from Local System
• T1027 — Obfuscated Files or Information
• T1059.003 — Windows Command Shell
• T1071.001 — Web Protocols
• T1114.001 — Local Email Collection

APT Groups Using This Tool

• MuddyWater