malware

POWERSTATS

S0223 · ATT&CK v19.2

aka Powermud

Platforms

Windows

Tracked actors

Description

[POWERSTATS](https://attack.mitre.org/software/S0223) is a PowerShell-based first stage backdoor used by [MuddyWater](https://attack.mitre.org/groups/G0069). (Citation: Unit 42 MuddyWater Nov 2017)

Actors that use this

1 tracked actor

MuddyWaterATT&CK-attributed