MITRE ATT&CKsoftware (malware)

S0050 CosmicDuke

Published 2017-05-31 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
TinyBaron, BotgenStudios, NemesisGemina
Version
1.1
Created
2017-05-31

Description

CosmicDuke is malware that was used by APT29 from 2010 to 2015.

Related

Uses · MITRE ATT&CK (19)

  • T1573.001 Symmetric Cryptography sub-technique
  • T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1003.004 LSA Secrets sub-technique
  • T1114.001 Local Email Collection sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1003.002 Security Account Manager sub-technique
  • T1056.001 Keylogging sub-technique
  • T1555 Credentials from Password Stores technique
  • T1543.003 Windows Service sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1005 Data from Local System technique
  • T1020 Automated Exfiltration technique
  • T1025 Data from Removable Media technique
  • T1039 Data from Network Shared Drive technique
  • T1068 Exploitation for Privilege Escalation technique
  • T1083 File and Directory Discovery technique
  • T1113 Screen Capture technique
  • T1115 Clipboard Data technique

Referenced by MITRE ATT&CK · uses (1)

References