S1163malware

SnappyTCP

SnappyTCP is a web shell used by Sea Turtle between 2021 and 2023 against multiple victims. SnappyTCP appears to be based on a public GitHub project that has since been removed from the code-sharing site. SnappyTCP includes a simple reverse TCP shell for Linux and Unix environments with basic command and control capabilities.

Platforms: Linux

MITRE ATT&CK ↗

Linked entities · 6

usesT1059.004Unix Shell usesT1071.001Web Protocols usesT1573.002Asymmetric Cryptography usesT1505.003Web Shell usesT1095Non-Application Layer Protocol uses byG1041Sea Turtle