G0092 TA505

Uses · MITRE ATT&CK (50)

• T1685 Disable or Modify Tools technique
• T1027.013 Encrypted/Encoded File sub-technique
• T1027.010 Command Obfuscation sub-technique
• S1025 Amadey software (malware)
• S0611 Clop software (malware)
• T1608.001 Upload Malware sub-technique
• T1553.005 Mark-of-the-Web Bypass sub-technique
• S0552 AdFind software (tool)
• S0521 BloodHound software (tool)
• T1588.001 Malware sub-technique
• T1588.002 Tool sub-technique
• T1583.001 Domains sub-technique
• T1059.007 JavaScript sub-technique
• S0461 SDBbot software (malware)
• S0460 Get2 software (malware)
• T1071.001 Web Protocols sub-technique
• T1078.002 Domain Accounts sub-technique
• T1204.001 Malicious Link sub-technique
• T1204.002 Malicious File sub-technique
• T1568.001 Fast Flux DNS sub-technique
• T1059.001 PowerShell sub-technique
• T1059.003 Windows Command Shell sub-technique
• T1059.005 Visual Basic sub-technique
• T1566.001 Spearphishing Attachment sub-technique
• T1566.002 Spearphishing Link sub-technique
• T1087.003 Email Account sub-technique
• T1555.003 Credentials from Web Browsers sub-technique
• T1559.002 Dynamic Data Exchange sub-technique
• T1027.002 Software Packing sub-technique
• T1553.002 Code Signing sub-technique