POORAIM

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[POORAIM](https://attack.mitre.org/software/S0216) is a backdoor used by [APT37](https://attack.mitre.org/groups/G0067) in campaigns since at least 2014. (Citation: FireEye APT37 Feb 2018)

Associated Techniques (6)

ID	ATT&CK	Tactics
T1057	Process Discovery	-
T1082	System Information Discovery	-
T1083	File and Directory Discovery	-
T1102.002	Bidirectional Communication	-
T1113	Screen Capture	-
T1189	Drive-by Compromise	-

Used by Actors (1)

APT37
Nation-state

Metadata

ID:	232
Created:	13/01/2026 17:48
Updated:	21/04/2026 16:00