malware

QUADAGENT

S0269 · ATT&CK v19.2

Platforms

Windows

Tracked actors

Description

[QUADAGENT](https://attack.mitre.org/software/S0269) is a PowerShell backdoor used by [OilRig](https://attack.mitre.org/groups/G0049). (Citation: Unit 42 QUADAGENT July 2018)

Actors that use this

1 tracked actor

OilRig (APT34)ATT&CK-attributed