POORAIM — Malware Profile
POORAIM is a backdoor used by APT37 in campaigns since at least 2014.
MITRE ATT&CK techniques (6)
- T1057 Process Discovery
- T1082 System Information Discovery
- T1083 File and Directory Discovery
- T1102.002 Bidirectional Communication
- T1113 Screen Capture
- T1189 Drive-by Compromise