PowerStallion

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[PowerStallion](https://attack.mitre.org/software/S0393) is a lightweight [PowerShell](https://attack.mitre.org/techniques/T1059/001) backdoor used by [Turla](https://attack.mitre.org/groups/G0010), possibly as a recovery access tool to install other backdoors.(Citation: ESET Turla PowerShell May 2019)

Associated Techniques (5)

ID	ATT&CK	Tactics
T1027	Obfuscated Files or Information	-
T1057	Process Discovery	-
T1059.001	PowerShell	-
T1070.006	Timestomp	-
T1102.002	Bidirectional Communication	-

Used by Actors (1)

Turla
Nation-state

Metadata

ID:	601
Created:	13/01/2026 17:48
Updated:	07/03/2026 16:00