RCSession

MITRE
Tipo Malware:
Other
Prima attivita:
Unknown
Ultima attivita:
Unknown
Dettagli:

[RCSession](https://attack.mitre.org/software/S0662) is a backdoor written in C++ that has been in use since at least 2018 by [Mustang Panda](https://attack.mitre.org/groups/G0129) and by [Threat Group-3390](https://attack.mitre.org/groups/G0027) (Type II Backdoor).(Citation: Secureworks BRONZE PRESIDENT December 2019)(Citation: Trend Micro Iron Tiger April 2021)(Citation: Trend Micro DRBControl February 2020)

Tecniche Associate (22)
ID ATT&CK Tattiche
T1005 Data from Local System -
T1027.011 Fileless Storage -
T1027.015 Compression -
T1033 System Owner/User Discovery -
T1036 Masquerading -
T1055.012 Process Hollowing -
T1056.001 Keylogging -
T1057 Process Discovery -
T1059.003 Windows Command Shell -
T1070.004 File Deletion -
T1071.001 Web Protocols -
T1082 System Information Discovery -
T1095 Non-Application Layer Protocol -
T1105 Ingress Tool Transfer -
T1106 Native API -
Metadata
ID: 10
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00