MITRE ATT&CKsoftware (malware)

S0037 HAMMERTOSS

Published 2017-05-31 Modified 2024-11-17 Official page ↗

Domain: enterprise
Platforms: Windows
Aliases: HammerDuke, NetDuke
Version: 1.2
Created: 2017-05-31

Description

HAMMERTOSS is a backdoor that was used by APT29 in 2015.

Related

Uses · MITRE ATT&CK (7)

T1573.001 Symmetric Cryptography sub-technique
T1001.002 Steganography sub-technique
T1071.001 Web Protocols sub-technique
T1102.003 One-Way Communication sub-technique
T1564.003 Hidden Window sub-technique
T1059.001 PowerShell sub-technique
T1567.002 Exfiltration to Cloud Storage sub-technique

Referenced by MITRE ATT&CK · uses (1)

G0016 APT29 group

References

https://www.f-secure.com/documents/996508/1030745/dukes_whitepaper.pdf F-Secure The Dukes
https://services.google.com/fh/files/misc/rpt-apt29-hammertoss-stealthy-tactics-define-en.pdf FireEye APT29