Malware.View on attack.mitre.org
httpclient is malware used by Putter Panda. It is a simple tool that provides a limited range of functionality, suggesting it is likely used as a second-stage or supplementary/backup tool.
| Technique | Procedure example |
|---|---|
| T1059.003 Windows Command Shell |
httpclient opens cmd.exe on the victim. |
| T1071.001 Web Protocols |
httpclient uses HTTP for command and control. |
| T1573.001 Symmetric Cryptography |
httpclient encrypts C2 content with XOR using a single byte, 0x12. |
None recorded.
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
