ecsirt:intrusions="backdoor",veris:action:malware:variety="Backdoor",ms-caro-malware:malware-type="Backdoor",ms-caro-malware-full:malware-type="Backdoor",misp-galaxy:mitre-attack-pattern="Masquerading - T1036",misp-galaxy:mitre-attack-pattern="Spearphishing via Service - T1194",misp-galaxy:mitre-attack-pattern="Screen Capture - T1113",misp-galaxy:mitre-attack-pattern="Input Capture - T1056",misp-galaxy:mitre-attack-pattern="Video Capture - T1125",misp-galaxy:mitre-attack-pattern="Forced Authentication - T1187",misp-galaxy:mitre-attack-pattern="Application Deployment Software - T1017",veris:action:malware:variety="Spyware/Keylogger",misp-galaxy:rat="Amavaldo Banking Trojan",misp-galaxy:tool="Amavaldo",tlp:white,type:OSINT,osint:lifetime="perpetual",osint:certainty="50"