G0060 BRONZE BUTLER

Uses · MITRE ATT&CK (54)

• T1685 Disable or Modify Tools technique
• S0596 ShadowPad software (malware)
• T1588.002 Tool sub-technique
• S0473 Avenger software (malware)
• S0469 ABK software (malware)
• S0470 BBK software (malware)
• S0471 build_downer software (malware)
• S0472 down_new software (malware)
• T1573.001 Symmetric Cryptography sub-technique
• T1071.001 Web Protocols sub-technique
• T1102.001 Dead Drop Resolver sub-technique
• T1132.001 Standard Encoding sub-technique
• T1574.001 DLL sub-technique
• T1204.002 Malicious File sub-technique
• T1059.001 PowerShell sub-technique
• T1059.003 Windows Command Shell sub-technique
• T1059.005 Visual Basic sub-technique
• T1059.006 Python sub-technique
• T1566.001 Spearphishing Attachment sub-technique
• T1087.002 Domain Account sub-technique
• T1560.001 Archive via Utility sub-technique
• T1003.001 LSASS Memory sub-technique
• T1036.002 Right-to-Left Override sub-technique
• T1036.005 Match Legitimate Resource Name or Location sub-technique
• T1027.001 Binary Padding sub-technique
• T1027.003 Steganography sub-technique
• T1070.004 File Deletion sub-technique
• T1548.002 Bypass User Account Control sub-technique
• T1550.003 Pass the Ticket sub-technique
• T1547.001 Registry Run Keys / Startup Folder sub-technique