Mafalda

MITRE
Tipo Malware:
Other
Prima attivita:
Unknown
Ultima attivita:
Unknown
Dettagli:

[Mafalda](https://attack.mitre.org/software/S1060) is a flexible interactive implant that has been used by [Metador](https://attack.mitre.org/groups/G1013). Security researchers assess the [Mafalda](https://attack.mitre.org/software/S1060) name may be inspired by an Argentinian cartoon character that has been popular as a means of political commentary since the 1960s. (Citation: SentinelLabs Metador Sept 2022)

Tecniche Associate (36)
ID ATT&CK Tattiche
T1003.001 LSASS Memory -
T1005 Data from Local System -
T1012 Query Registry -
T1016 System Network Configuration Discovery -
T1027.013 Encrypted/Encoded File -
T1033 System Owner/User Discovery -
T1041 Exfiltration Over C2 Channel -
T1049 System Network Connections Discovery -
T1056 Input Capture -
T1057 Process Discovery -
T1059.001 PowerShell -
T1059.003 Windows Command Shell -
T1070.001 Clear Windows Event Logs -
T1071.001 Web Protocols -
T1074.001 Local Data Staging -
Usato da Attori (1)
Metadata
ID: 153
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00