MITRE ATT&CKsoftware (malware)
S0117 XTunnel
- Domain
- enterprise
- Platforms
- Windows
- Aliases
- Trojan.Shunnael, X-Tunnel, XAPS
- Version
- 2.1
- Created
- 2017-05-31
Description
Related
Uses · MITRE ATT&CK (8)
- T1027.016 Junk Code Insertion sub-technique
- T1573.002 Asymmetric Cryptography sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1552.001 Credentials In Files sub-technique
- T1008 Fallback Channels technique
- T1027 Obfuscated Files or Information technique
- T1046 Network Service Discovery technique
- T1090 Proxy technique
Referenced by MITRE ATT&CK · uses (1)
- G0007 APT28 group
References
- https://www.crowdstrike.com/blog/bears-midst-intrusion-democratic-national-committee/ Crowdstrike DNC June 2016
- https://www.invincea.com/2016/07/tunnel-of-gov-dnc-hack-and-the-russian-xtunnel/ Invincea XTunnel
- http://www.welivesecurity.com/wp-content/uploads/2016/10/eset-sednit-part-2.pdf ESET Sednit Part 2
- https://www.symantec.com/blogs/election-security/apt28-espionage-military-government Symantec APT28 Oct 2018