PS1

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[PS1](https://attack.mitre.org/software/S0613) is a loader that was used to deploy 64-bit backdoors in the [CostaRicto](https://attack.mitre.org/groups/G0132) campaign.(Citation: BlackBerry CostaRicto November 2020)

Associated Techniques (5)
ID ATT&CK Tactics
T1027.013 Encrypted/Encoded File -
T1055.001 Dynamic-link Library Injection -
T1059.001 PowerShell -
T1105 Ingress Tool Transfer -
T1140 Deobfuscate/Decode Files or Information -
Metadata
ID: 62
Created: 13/01/2026 17:48
Updated: 21/04/2026 16:00