MITRE ATT&CKsoftware (malware)
S0124 Pisloader
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2017-05-31
Description
Pisloader is a malware family that is notable due to its use of DNS as a C2 protocol as well as its use of anti-analysis tactics. It has been used by APT18 and is similar to another malware family, HTTPBrowser, that has been used by the group.
Related
Uses · MITRE ATT&CK (9)
- T1071.004 DNS sub-technique
- T1132.001 Standard Encoding sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1016 System Network Configuration Discovery technique
- T1027 Obfuscated Files or Information technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0026 APT18 group