# DropBook
> Tipo: **malware** · S0547 · [MITRE ATT&CK](https://attack.mitre.org/software/S0547)
## Descrição
[[s0547-dropbook|DropBook]] é um backdoor baseado em Python compilado com PyInstaller.
**Plataformas:** Windows
## Técnicas Utilizadas
- [[t1059-006-python|T1059.006 - Python]]
- [[t1059-003-windows-command-shell|T1059.003 - Windows Command Shell]]
- [[t1083-file-and-directory-discovery|T1083 - File and Directory Discovery]]
- [[t1102-web-service|T1102 - Web Service]]
- [[t1567-exfiltration-over-web-service|T1567 - Exfiltration Over Web Service]]
- [[t1105-ingress-tool-transfer|T1105 - Ingress Tool Transfer]]
- [[t1140-deobfuscatedecode-files-or-information|T1140 - Deobfuscaté/Decode Files or Information]]
- [[t1614-001-system-language-discovery|T1614.001 - System Language Discovery]]
- [[t1082-system-information-discovery|T1082 - System Information Discovery]]
## Grupos que Usam
- [[g0021-molerats|Molerats]]
## Referências
- [MITRE ATT&CK - S0547](https://attack.mitre.org/software/S0547)