PowerPepper

Description

(Kaspersky) PowerPepper is a Windows in-memory PowerShell backdoor that can execute remotely sent shell commands. In strict accordance with DeathStalker’s traditions, the implant will try to evade detection or sandboxes execution with various tricks such as detecting mouse movements, filtering the client’s MAC addresses, and adapting its execution flow depending on detected antivirus products.

Names

Name
PowerPepper

Category

Malware

Type

  • Backdoor

Information

Malpedia

Other Information

Uuid

5eb26475-f51f-4968-adff-5d54c103f96c

Last Card Change

2021-04-24