# Pteranodon
> Tipo: **malware** · S0147 · [MITRE ATT&CK](https://attack.mitre.org/software/S0147)
## Descrição
[[s0147-pteranodon|Pteranodon]] é um backdoor customizado utilizado pelo [[g0047-gamaredon|Gamaredon Group]].
**Plataformas:** Windows
## Técnicas Utilizadas
- [[t1113-screen-capture|T1113 - Screen Capture]]
- [[t1059-003-windows-command-shell|T1059.003 - Windows Command Shell]]
- [[t1106-native-api|T1106 - Native API]]
- [[t1105-ingress-tool-transfer|T1105 - Ingress Tool Transfer]]
- [[t1547-001-registry-run-keys-startup-folder|T1547.001 - Registry Run Keys / Startup Folder]]
- [[t1071-001-web-protocols|T1071.001 - Web Protocols]]
- [[t1083-file-and-directory-discovery|T1083 - File and Directory Discovery]]
- [[t1140-deobfuscatedecode-files-or-information|T1140 - Deobfuscaté/Decode Files or Information]]
- [[t1027-007-dynamic-api-resolution|T1027.007 - Dynamic API Resolution]]
- [[t1059-005-visual-basic|T1059.005 - Visual Basic]]
- [[t1218-011-rundll32|T1218.011 - Rundll32]]
- [[t1041-exfiltration-over-c2-channel|T1041 - Exfiltration Over C2 Channel]]
- [[t1070-004-file-deletion|T1070.004 - File Deletion]]
- [[t1074-001-local-data-staging|T1074.001 - Local Data Staging]]
- [[t1497-virtualizationsandbox-evasion|T1497 - Virtualization/Sandbox Evasion]]
## Grupos que Usam
- [[g0047-gamaredon|Gamaredon Group]]
## Referências
- [MITRE ATT&CK - S0147](https://attack.mitre.org/software/S0147)