ESET_Machete.pdf
ID: f93eac44-83c5-44b7-9505-fec4c48947d2
STIX ID: report--f93eac44-83c5-44b7-9505-fec4c48947d2
Threat Score
85/100
Uploaded: 2026-08-11
Published Date: 2019-07-20
Last Modified Date: 2019-07-20
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
**ESET whitepaper — Machete:** Technical analysis of a long‑running Spanish‑language cyberespionage operation targeting Latin American entities (notably the Venezuelan military). The report describes Python-based backdoors and downloaders delivered via spearphishing (self‑extracting archives), persistence via scheduled tasks, extensive data collection (screenshots, keylogging, clipboard, browser profiles, GIS and office documents), exfiltration over FTP/HTTP and removable media, geolocation via Mozilla Location Service, layered obfuscation, and comprehensive IOCs (file hashes, domains, IPs, and MITRE technique mappings).
