Skip to content

S0185 SEASHARPEE

SEASHARPEE is a Web shell that has been used by OilRig. 1

Item Value
ID S0185
Associated Names
Type MALWARE
Version 2.0
Created 16 January 2018
Last Modified 23 April 2021
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
enterprise T1059 Command and Scripting Interpreter -
enterprise T1059.003 Windows Command Shell SEASHARPEE can execute commands on victims.1
enterprise T1070 Indicator Removal -
enterprise T1070.006 Timestomp SEASHARPEE can timestomp files on victims using a Web shell.1
enterprise T1105 Ingress Tool Transfer SEASHARPEE can download remote files onto victims.1
enterprise T1505 Server Software Component -
enterprise T1505.003 Web Shell SEASHARPEE is a Web shell.1

Groups That Use This Software

ID Name References
G0049 OilRig 1

References