MITRE ATT&CKsoftware (malware)

S0129 AutoIt backdoor

Published 2017-05-31 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2017-05-31

Description

AutoIt backdoor is malware that has been used by the actors responsible for the MONSOON campaign. The actors frequently used it in weaponized .pps files exploiting CVE-2014-6352. This malware makes use of the legitimate scripting language for Windows GUI automation with the same name.

Related

Uses · MITRE ATT&CK (4)

  • T1132.001 Standard Encoding sub-technique
  • T1059.001 PowerShell sub-technique
  • T1548.002 Bypass User Account Control sub-technique
  • T1083 File and Directory Discovery technique

Referenced by MITRE ATT&CK · uses (2)

References