S1206 JumbledPath

malwareEnterprise

platformsNetwork Devices

also known asJumbledPath

JumbledPath is a custom-built utility written in GO that has been used by Salt Typhoon since at least 2024 for packet capture on remote Cisco devices. JumbledPath is compiled as an ELF binary using x86-64 architecture which makes it potentially useable across Linux operating systems and network devices from multiple vendors.

techniques used (6)

ATT&CK techniques this enables or maps to.

T1040Network Sniffing
T1104Multi-Stage Channels
T1560Archive Collected Data
T1665Hide Infrastructure
T1685Disable or Modify Tools
T1685.006Clear Linux or Mac System Logs

used by groups (1)

Threat groups associated with this.

G1045Salt Typhoon

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan