S0280 MirageFox

malwareEnterprise

platformsWindows

also known asMirageFox

MirageFox is a remote access tool used against Windows systems. It appears to be an upgraded version of a tool known as Mirage, which is a RAT believed to originate in 2012.

techniques used (5)

ATT&CK techniques this enables or maps to.

T1033System Owner/User Discovery
T1059.003Windows Command Shell
T1082System Information Discovery
T1140Deobfuscate/Decode Files or Information
T1574.001DLL

used by groups (1)

Threat groups associated with this.

G0004Ke3chang

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan