# SodaMaster > Tipo: **malware** · S0627 · [MITRE ATT&CK](https://attack.mitre.org/software/S0627) ## Descrição [[s0627-sodamaster|SodaMaster]] é um malware fileless utilizado pelo [[g0045-apt10|menuPass]] para baixar e executar payloads desde pelo menos 2020. **Plataformas:** Windows ## Técnicas Utilizadas - [[t1105-ingress-tool-transfer|T1105 - Ingress Tool Transfer]] - [[t1106-native-api|T1106 - Native API]] - [[t1497-001-system-checks|T1497.001 - System Checks]] - [[t1573-002-asymmetric-cryptography|T1573.002 - Asymmetric Cryptography]] - [[t1497-003-time-based-checks|T1497.003 - Time Based Checks]] - [[t1027-obfuscated-files-or-information|T1027 - Obfuscated Files or Information]] - [[t1033-system-owneruser-discovery|T1033 - System Owner/User Discovery]] - [[t1082-system-information-discovery|T1082 - System Information Discovery]] - [[t1573-001-symmetric-cryptography|T1573.001 - Symmetric Cryptography]] - [[t1057-process-discovery|T1057 - Process Discovery]] - [[t1012-query-registry|T1012 - Query Registry]] ## Grupos que Usam - [[g0045-apt10|menuPass]] ## Referências - [MITRE ATT&CK - S0627](https://attack.mitre.org/software/S0627)