S1085 Sardonic

malwareEnterprise

platformsWindows

also known asSardonic

Sardonic is a backdoor written in C and C++ that is known to be used by FIN8, as early as August 2021 to target a financial institution in the United States. Sardonic has a plugin system that can load specially made DLLs and execute their functions.

01

techniques used (25)

ATT&CK techniques this enables or maps to.

02

used by groups (1)

Threat groups associated with this.

03

source

Where this definition is published.

view on ATT&CK
scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan