H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

StreamEx

[StreamEx](https://attack.mitre.org/software/S0142) is a malware family that has been used by [Deep Panda](https://attack.mitre.org/groups/G0009) since at least 2015. In 2016, it was distributed via legitimate compromised Korean websites. (Citation: Cylance Shell Crew Feb 2017)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[StreamEx](https://attack.mitre.org/software/S0142) is a malware family that has been used by [Deep Panda](https://attack.mitre.org/groups/G0009) since at least 2015. In 2016, it was distributed via legitimate compromised Korean websites. (Citation: Cylance Shell Crew Feb 2017)

Labels

malware
10 recorded

Relationships

uses
from Deep Panda
Group
uses
to File and Directory Discovery
Technique
uses
to Modify Registry
Technique
uses
to Obfuscated Files or Information
Technique
uses
to Process Discovery
Technique
uses
to Rundll32
Technique
uses
to Security Software Discovery
Technique
uses
to System Information Discovery
Technique
uses
to Windows Command Shell
Technique
uses
to Windows Service
Technique
3 external

References

mitre-attack
S0142
open
StreamEx
—
Cylance Shell Crew Feb 2017
https://www.cylance.com/shell-crew-variants-continue-to-fly-under-big-avs-radar
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance