PHOREAL — Malware Profile

PHOREAL is a signature backdoor used by APT32.

MITRE ATT&CK techniques (3)

• T1059.003 Windows Command Shell
• T1095 Non-Application Layer Protocol
• T1112 Modify Registry

Attributed threat actors

• APT32

Read the full analysis on IntelFusions