Upgrade implant to stage 2 (PneumaEX)

This TTP untars the payload containing PneumaEX and a shell script. The shell script checks for deep learning python frameworks then upgrades the agent to PneumaEX. If it doesn't detect deep learning frameworks it will delete all elevation artifacts.
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.


Test this TTP

Download Operator (1.7.1)
Test this TTP using one of our Operator chains
B1-66ER (Discovery)


Perform discovery techniques to determine if an agent has access to a ML/DL environment.