Spark

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[Spark](https://attack.mitre.org/software/S0543) is a Windows backdoor and has been in use since as early as 2017.(Citation: Unit42 Molerat Mar 2020)

ID	ATT&CK	Tactics
T1027.002	Software Packing	-
T1033	System Owner/User Discovery	-
T1041	Exfiltration Over C2 Channel	-
T1059.003	Windows Command Shell	-
T1071.001	Web Protocols	-
T1082	System Information Discovery	-
T1132.001	Standard Encoding	-
T1140	Deobfuscate/Decode Files or Information	-
T1497.002	User Activity Based Checks	-
T1614.001	System Language Discovery	-

Molerats
Nation-state