PoisonIvy

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[PoisonIvy](https://attack.mitre.org/software/S0012) is a popular remote access tool (RAT) that has been used by many groups.(Citation: FireEye Poison Ivy)(Citation: Symantec Elderwood Sept 2012)(Citation: Symantec Darkmoon Aug 2005)

Associated Techniques (15)
ID ATT&CK Tactics
T1005 Data from Local System -
T1010 Application Window Discovery -
T1014 Rootkit -
T1027 Obfuscated Files or Information -
T1055.001 Dynamic-link Library Injection -
T1056.001 Keylogging -
T1059.003 Windows Command Shell -
T1074.001 Local Data Staging -
T1105 Ingress Tool Transfer -
T1112 Modify Registry -
T1480.002 Mutual Exclusion -
T1543.003 Windows Service -
T1547.001 Registry Run Keys / Startup Folder -
T1547.014 Active Setup -
T1573.001 Symmetric Cryptography -
Aliases (315)
Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon Breut Poison Ivy Darkmoon
Used by Actors (14)
admin@338
Unknown
APT1
Nation-state
APT5
Unknown
Axiom
Unknown
DragonOK
Nation-state
Elderwood
Unknown
GALLIUM
Unknown
IndigoZebra
Unknown
menuPass
Unknown
Moafee
Unknown
Metadata
ID: 503
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00