MITRE ATT&CKsoftware (malware)
S0070 HTTPBrowser
- Domain
- enterprise
- Platforms
- Windows
- Aliases
- Token Control, HttpDump
- Version
- 1.1
- Created
- 2017-05-31
Description
HTTPBrowser is malware that has been used by several threat groups. It is believed to be of Chinese origin.
Related
Uses · MITRE ATT&CK (11)
- T1071.001 Web Protocols sub-technique
- T1071.004 DNS sub-technique
- T1574.001 DLL sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1056.001 Keylogging sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1070.004 File Deletion sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1027 Obfuscated Files or Information technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
References
- https://www.threatstream.com/blog/evasive-maneuvers-the-wekby-group-attempts-to-evade-analysis-via-custom-rop ThreatStream Evasion Analysis
- https://www.secureworks.com/research/threat-group-3390-targets-organizations-for-cyberespionage Dell TG-3390
- https://www.threatconnect.com/the-anthem-hack-all-roads-lead-to-china/ ThreatConnect Anthem