MITRE ATT&CK Malware

Felismus (S0171)

[Felismus](https://attack.mitre.org/software/S0171) is a modular backdoor that has been used by [Sowbug](https://attack.mitre.org/groups/G0054). (Citation: Symantec Sowbug Nov 2017) (Citation: Forcepoint Felismus Mar 2017)

Platforms: Windows

▪Techniques implemented (10)

T1036.005Match Legitimate Resource Name or Location T1033System Owner/User Discovery T1071.001Web Protocols T1518.001Security Software Discovery T1082System Information Discovery T1132.001Standard Encoding T1016System Network Configuration Discovery T1105Ingress Tool Transfer T1573.001Symmetric Cryptography T1059.003Windows Command Shell

▪Used by groups (1)

G0054Sowbug

S0171on MITRE ATT&CK →

MITRE ATT&CK Malware

Felismus (S0171)

ShareX LinkedIn Reddit HN

Platforms: Windows

▪Techniques implemented (10)

▪Used by groups (1)

G0054Sowbug

S0171on MITRE ATT&CK →

Felismus (S0171)

▪Techniques implemented (10)

▪Used by groups (1)

Explore Gold

Security Data & Tools

Products

Use Cases

Company

Felismus (S0171)

▪Techniques implemented (10)

▪Used by groups (1)