Bankshot
MITRE
Malware Type:
Other
Other
First seen:
Unknown
Unknown
Last seen:
Unknown
Unknown
Details:
[Bankshot](https://attack.mitre.org/software/S0239) is a remote access tool (RAT) that was first reported by the Department of Homeland Security in December of 2017. In 2018, [Lazarus Group](https://attack.mitre.org/groups/G0032) used the [Bankshot](https://attack.mitre.org/software/S0239) implant in attacks against the Turkish financial sector. (Citation: McAfee Bankshot)
Associated Techniques (25)
| ID | ATT&CK | Tactics |
|---|---|---|
| T1001.003 | Protocol or Service Impersonation | - |
| T1005 | Data from Local System | - |
| T1012 | Query Registry | - |
| T1041 | Exfiltration Over C2 Channel | - |
| T1057 | Process Discovery | - |
| T1059.003 | Windows Command Shell | - |
| T1070 | Indicator Removal | - |
| T1070.004 | File Deletion | - |
| T1070.006 | Timestomp | - |
| T1071.001 | Web Protocols | - |
| T1082 | System Information Discovery | - |
| T1083 | File and Directory Discovery | - |
| T1087.001 | Local Account | - |
| T1087.002 | Domain Account | - |
| T1105 | Ingress Tool Transfer | - |
Aliases (105)
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Trojan Manuscript
Used by Actors (1)
Metadata
| ID: | 83 |
| Created: | 13/01/2026 17:48 |
| Updated: | 06/03/2026 16:00 |