SYMBOLCOMMON_NAMEaka. SYNONYMS
py.pyramid (Back to overview)

Pyramid

According to its author, Pyramid is a post exploitation framework written in Python, capable of executing offensive tooling from a signed binary (e.g. python.exe) by importing their dependencies in memory. It was created to demonstrate a bypass strategy against EDRs based on some blind-spots assumptions.

References
2025-04-01 ⋅ Hunt.io ⋅ Hunt.io
Same Russian-Speaking Threat Actor, New Tactics: Abuse of Cloudflare Services for Phishing and Telegram to Filter Victim IPs
Pyramid
2025-03-04 ⋅ Hunt.io ⋅ Hunt.io
Exposing Russian EFF Impersonators: The Inside Story on Stealc & Pyramid C2
Pyramid Stealc
2025-02-12 ⋅ Hunt.io ⋅ Hunt.io
Tracking Pyramid C2: Identifying Post-Exploitation Servers in Hunt
Pyramid
2024-12-02 ⋅ The DFIR Report ⋅ The DFIR Report
The Curious Case of an Egg-Cellent Resume
More_eggs Pyramid Cobalt Strike
2022-08-13 ⋅ Github (naksyn) ⋅ Diego Capriotti
Github Repo for Pyramid
Pyramid

There is no Yara-Signature yet.