sqlmap — Malware Profile

sqlmap is an open source penetration testing tool that can be used to automate the process of detecting and exploiting SQL injection flaws.

MITRE ATT&CK techniques (1)

• T1190 Exploit Public-Facing Application

Attributed threat actors

• Cotton Sandstorm machine-inferred link
• APT41
• Ajax Security Team
• Earth Krahang machine-inferred link

Read the full analysis on IntelFusions