# Felismus > Tipo: **malware** · S0171 · [MITRE ATT&CK](https://attack.mitre.org/software/S0171) ## Descrição [[s0171-felismus|Felismus]] é um backdoor modular utilizado pelo grupo [[g0054-sowbug|Sowbug]]. **Plataformas:** Windows ## Técnicas Utilizadas - [[t1036-005-match-legitimate-resource-name-or-location|T1036.005 - Match Legitimaté Resource Name or Location]] - [[t1033-system-owneruser-discovery|T1033 - System Owner/User Discovery]] - [[t1071-001-web-protocols|T1071.001 - Web Protocols]] - [[t1518-001-security-software-discovery|T1518.001 - Security Software Discovery]] - [[t1082-system-information-discovery|T1082 - System Information Discovery]] - [[t1132-001-standard-encoding|T1132.001 - Standard Encoding]] - [[t1016-system-network-configuration-discovery|T1016 - System Network Configuration Discovery]] - [[t1105-ingress-tool-transfer|T1105 - Ingress Tool Transfer]] - [[t1573-001-symmetric-cryptography|T1573.001 - Symmetric Cryptography]] - [[t1059-003-windows-command-shell|T1059.003 - Windows Command Shell]] ## Grupos que Usam - [[g0054-sowbug|Sowbug]] ## Referências - [MITRE ATT&CK - S0171](https://attack.mitre.org/software/S0171)