Ferocious

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[Ferocious](https://attack.mitre.org/software/S0679) is a first stage implant composed of VBS and PowerShell scripts that has been used by [WIRTE](https://attack.mitre.org/groups/G0090) since at least 2021.(Citation: Kaspersky WIRTE November 2021)

Associated Techniques (9)

ID	ATT&CK	Tactics
T1059.001	PowerShell	-
T1059.005	Visual Basic	-
T1070.004	File Deletion	-
T1082	System Information Discovery	-
T1112	Modify Registry	-
T1120	Peripheral Device Discovery	-
T1497.001	System Checks	-
T1518.001	Security Software Discovery	-
T1546.015	Component Object Model Hijacking	-

Used by Actors (1)

WIRTE
Unknown

Metadata

ID:	334
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00