S1074 ANDROMEDA
malwareEnterpriseplatformsWindows
also known asANDROMEDA
ANDROMEDA is commodity malware that was widespread in the early 2010's and continues to be observed in infections across a wide variety of industries. During the 2022 C0026 campaign, threat actors re-registered expired ANDROMEDA C2 domains to spread malware to select targets in Ukraine.
01
techniques used (7)
ATT&CK techniques this enables or maps to.
02
used by campaigns (1)
Campaigns that use this.
03
source
Where this definition is published.
scry
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan