POWRUNER (67cdb7a6-5142-43fa-8b8d-d9bdd2a4dae4)
POWRUNER is a PowerShell script that sends and receives commands to and from the C2 server. [FireEye APT34 Dec 2017]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| OilRig (d01abdb1-0378-4654-aa38-1a4a292703e2) | Tidal Groups | POWRUNER (67cdb7a6-5142-43fa-8b8d-d9bdd2a4dae4) | Tidal Software | 1 |