S0139 · PowerDuke

malwareenterprise-attackS0139

PowerDuke

malware--00c3bfcb-99bd-4767-8c03-b08f585f5c8a

PowerDuke is a backdoor that was used by APT29 in 2016. It has primarily been delivered through Microsoft Word or Excel attachments containing malicious macros. (Citation: Volexity PowerDuke November 2016)

Created: May 31, 2017, 9:33 PM UTC
Modified: Apr 25, 2025, 2:42 PM UTC

External references

mitre-attackS0139Open reference

PowerDuke

Volexity PowerDuke November 2016Open reference

Platforms

Windows

Kill chain phases

Only techniques sit in a kill chain phase.

Relationships

Incoming and outgoing edges in the selected ATT&CK release.

Incoming and outgoing edges in the selected ATT&CK release
Direction	Type	Related object

S0139 · PowerDuke · Sunturai