malware

POWRUNER

S0184 · ATT&CK v19.2

Platforms

Windows

Tracked actors

Description

[POWRUNER](https://attack.mitre.org/software/S0184) is a PowerShell script that sends and receives commands to and from the C2 server. (Citation: FireEye APT34 Dec 2017)

Actors that use this

1 tracked actor

OilRig (APT34)ATT&CK-attributed