S1049 SUGARUSH
malwareEnterpriseplatformsWindows
also known asSUGARUSH
SUGARUSH is a small custom backdoor that can establish a reverse shell over TCP to a hard coded C2 address. SUGARUSH was first identified during analysis of UNC3890's C0010 campaign targeting Israeli companies, which began in late 2020.
01
techniques used (6)
ATT&CK techniques this enables or maps to.
02
used by campaigns (1)
Campaigns that use this.
03
source
Where this definition is published.
scry
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan