Truvasys — Malware Profile

Truvasys is first-stage malware that has been used by PROMETHIUM. It is a collection of modules written in the Delphi programming language.

MITRE ATT&CK techniques (2)

• T1036.004 Masquerade Task or Service
• T1547.001 Registry Run Keys / Startup Folder

Attributed threat actors

• PROMETHIUM

Read the full analysis on IntelFusions