S1227 StarProxy

malwareEnterprise

platformsWindows

also known asStarProxy

StarProxy is custom malware used by Mustang Panda as a post-compromise tool, to enable proxying of traffic between the infected machine and other machines on the same network.

techniques used (9)

ATT&CK techniques this enables or maps to.

T1001.003Protocol or Service Impersonation
T1059Command and Scripting Interpreter
T1090.001Internal Proxy
T1095Non-Application Layer Protocol
T1106Native API
T1124System Time Discovery
T1140Deobfuscate/Decode Files or Information
T1573.001Symmetric Cryptography
T1574.001DLL

used by groups (1)

Threat groups associated with this.

G0129Mustang Panda

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan