BlackEnergy

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[BlackEnergy](https://attack.mitre.org/software/S0089) is a malware toolkit that has been used by both criminal and APT actors. It dates back to at least 2007 and was originally designed to create botnets for use in conducting Distributed Denial of Service (DDoS) attacks, but its use has evolved to support various plug-ins. It is well known for being used during the confrontation between Georgia and Russia in 2008, as well as in targeting Ukrainian institutions. Variants include BlackEnergy 2 and BlackEnergy 3. (Citation: F-Secure BlackEnergy 2014)

Associated Techniques (25)
ID ATT&CK Tactics
T1008 Fallback Channels -
T1016 System Network Configuration Discovery -
T1021.002 SMB/Windows Admin Shares -
T1046 Network Service Discovery -
T1047 Windows Management Instrumentation -
T1049 System Network Connections Discovery -
T1055.001 Dynamic-link Library Injection -
T1056.001 Keylogging -
T1057 Process Discovery -
T1070 Indicator Removal -
T1070.001 Clear Windows Event Logs -
T1071.001 Web Protocols -
T1082 System Information Discovery -
T1083 File and Directory Discovery -
T1113 Screen Capture -
Aliases (105)
Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy Black Energy
Used by Actors (1)
Sandworm Team
Unknown
Metadata
ID: 238
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00