MITRE ATT&CKsoftware (malware)

S0043 BUBBLEWRAP

Published 2017-05-31 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
Backdoor.APT.FakeWinHTTPHelper
Version
1.1
Created
2017-05-31

Description

BUBBLEWRAP is a full-featured, second-stage backdoor used by the admin@338 group. It is set to run when the system boots and includes functionality to check, upload, and register plug-ins that can further enhance its capabilities.

Related

Uses · MITRE ATT&CK (3)

  • T1071.001 Web Protocols sub-technique
  • T1082 System Information Discovery technique
  • T1095 Non-Application Layer Protocol technique

Referenced by MITRE ATT&CK · uses (1)

References