Sec
Lookup
Search
MITRE ATT&CK
software (malware)
S0109
WEBC2
Published 2017-05-31
Modified 2023-12-26
Official page ↗
Domain
enterprise
Platforms
Windows
Version
2.0
Created
2017-05-31
Description
WEBC2
is a family of backdoor malware used by
APT1
as early as July 2006.
WEBC2
backdoors are designed to retrieve a webpage, with commands hidden in HTML comments or special tags, from a predetermined C2 server.
Related
Uses · MITRE ATT&CK
(3)
T1574.001
DLL
sub-technique
T1059.003
Windows Command Shell
sub-technique
T1105
Ingress Tool Transfer
technique
Referenced by MITRE ATT&CK · uses
(1)
G0006
APT1
group
References
https://www.mandiant.com/sites/default/files/2021-09/mandiant-apt1-report.pdf
Mandiant APT1 Appendix
https://www.fireeye.com/content/dam/fireeye-www/services/pdfs/mandiant-apt1-report.pdf
Mandiant APT1