H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

PowerPunch

[PowerPunch](https://attack.mitre.org/software/S0685) is a lightweight downloader that has been used by [Gamaredon Group](https://attack.mitre.org/groups/G0047) since at least 2021.(Citation: Microsoft Actinium February 2022)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[PowerPunch](https://attack.mitre.org/software/S0685) is a lightweight downloader that has been used by [Gamaredon Group](https://attack.mitre.org/groups/G0047) since at least 2021.(Citation: Microsoft Actinium February 2022)

Labels

malware
5 recorded

Relationships

uses
from Gamaredon Group
Group
uses
to Command Obfuscation
Technique
uses
to Environmental Keying
Technique
uses
to Ingress Tool Transfer
Technique
uses
to PowerShell
Technique
2 external

References

mitre-attack
S0685
open
Microsoft Actinium February 2022
https://www.microsoft.com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance