SodaMaster

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[SodaMaster](https://attack.mitre.org/software/S0627) is a fileless malware used by [menuPass](https://attack.mitre.org/groups/G0045) to download and execute payloads since at least 2020.(Citation: Securelist APT10 March 2021)

Associated Techniques (11)
ID ATT&CK Tactics
T1012 Query Registry -
T1027 Obfuscated Files or Information -
T1033 System Owner/User Discovery -
T1057 Process Discovery -
T1082 System Information Discovery -
T1105 Ingress Tool Transfer -
T1106 Native API -
T1497.001 System Checks -
T1497.003 Time Based Checks -
T1573.001 Symmetric Cryptography -
T1573.002 Asymmetric Cryptography -
Aliases (321)
DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake DARKTOWN dfls DelfsCake
Used by Actors (1)
menuPass
Unknown
Metadata
ID: 422
Created: 13/01/2026 17:48
Updated: 08/03/2026 04:00