Home/ MITRE Matrix/ Command and Control/ T1132.001

T1132.001Standard Encoding

T1132.001 — Standard Encoding is a MITRE ATT&CK technique in the Command and Control tactic. Clankerusecase tracks 7 detection use cases covering it and 9 threat-intel articles citing it.

Command and Control

View on the matrix → Filter Detection Library MITRE official spec ↗

7Use cases

9Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1132 · Data Encoding

Use cases covering this technique (7)

[LLM] Credential exfil via shell command injection: base64-encoded secrets curled to OAST domain Bespoke actions · alerting DSΣPDDCS [LLM] Starland RAT / WLDR C2 beaconing to UAT-11795 HWID-parameterized domains Bespoke c2 · alerting DSΣPDDCS [LLM] Injective SDK wallet-key exfil to lookalike domain testnet.archival.chain.grpc-web.injective.network Bespoke actions · alerting DSΣPDDCS [LLM] Exfil to lookalike Injective gRPC-web subdomain (@injectivelabs stealer C2) Bespoke c2 · alerting DSΣPDDCS [LLM] C2 egress to flipboxstudio.info from Laravel-Lang composer dropper Bespoke c2 · alerting DSΣPDDCS [LLM] Scavenger npm malware C2 beacon to firebase.su / dieorsuffer.com / smartscreen-api.com Bespoke c2 · alerting DSΣPDD [LLM] MuddyViper C2 fingerprint: 'A WinHTTP Example Program/1.0' UA + distinctive URI paths Bespoke c2 · alerting DSΣPDDCS

Articles citing this technique (9)

high Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection art-08

crit UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign art-256

high Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys art-291

crit Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry art-308

crit ESET takes part in Operation Endgame to disrupt Amadey and Stealc art-351

high Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer art-446

crit Webworm: New burrowing techniques art-459

crit Another npm Supply Chain Attack: The 'is' Package Compromise art-687

med MuddyWater: Snakes by the riverbank art-786