MITRE ATT&CK Malware

KOPILUWAK (S1075)

[KOPILUWAK](https://attack.mitre.org/software/S1075) is a JavaScript-based reconnaissance tool that has been used for victim profiling and C2 since at least 2017.(Citation: Mandiant Suspected Turla Campaign February 2023)

Platforms: Windows

▪Techniques implemented (13)

T1071.001Web Protocols T1204.002Malicious File T1057Process Discovery T1135Network Share Discovery T1016System Network Configuration Discovery T1041Exfiltration Over C2 Channel T1680Local Storage Discovery T1049System Network Connections Discovery T1566.001Spearphishing Attachment T1005Data from Local System T1074.001Local Data Staging T1059.007JavaScript T1033System Owner/User Discovery

▪Used by groups (1)

G0010Turla

S1075on MITRE ATT&CK →

MITRE ATT&CK Malware

KOPILUWAK (S1075)

ShareX LinkedIn Reddit HN

Platforms: Windows

▪Techniques implemented (13)

▪Used by groups (1)

G0010Turla

S1075on MITRE ATT&CK →

KOPILUWAK (S1075)

▪Techniques implemented (13)

▪Used by groups (1)

Explore Gold

Security Data & Tools

Products

Use Cases

Company

KOPILUWAK (S1075)

▪Techniques implemented (13)

▪Used by groups (1)