RemoteUtilities — Malware Profile

RemoteUtilities is a legitimate remote administration tool that has been used by MuddyWater since at least 2021 for execution on target machines.

MITRE ATT&CK techniques (4)

• T1083 File and Directory Discovery
• T1105 Ingress Tool Transfer
• T1113 Screen Capture
• T1218.007 Msiexec

Attributed threat actors

• MuddyWater

Read the full analysis on IntelFusions