Out1 is a remote access tool written in python and used by MuddyWater since at least 2021.
| Technique | Procedure example |
|---|---|
| T1005 Data from Local System |
Out1 can copy files and Registry data from compromised hosts. |
| T1027 Obfuscated Files or Information |
Out1 has the ability to encode data. |
| T1059.003 Windows Command Shell |
Out1 can use native command line for execution. |
| T1071.001 Web Protocols |
Out1 can use HTTP and HTTPS in communications with remote hosts. |
| T1114.001 Local Email Collection |
Out1 can parse e-mails on a target machine. |
None recorded.
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
