MITRE ATT&CKsoftware (malware)
S0147 Pteranodon
- Domain
- enterprise
- Platforms
- Windows
- Aliases
- Pterodo
- Version
- 2.1
- Created
- 2017-05-31
Description
Pteranodon is a custom backdoor used by Gamaredon Group.
Related
Uses · MITRE ATT&CK (17)
- T1027.007 Dynamic API Resolution sub-technique
- T1071.001 Web Protocols sub-technique
- T1074.001 Local Data Staging sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1059.005 Visual Basic sub-technique
- T1070.004 File Deletion sub-technique
- T1218.005 Mshta sub-technique
- T1218.011 Rundll32 sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1053.005 Scheduled Task sub-technique
- T1497 Virtualization/Sandbox Evasion technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1041 Exfiltration Over C2 Channel technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
- T1106 Native API technique
- T1113 Screen Capture technique
Referenced by MITRE ATT&CK · uses (1)
- G0047 Gamaredon Group group
References
- https://researchcenter.paloaltonetworks.com/2017/02/unit-42-title-gamaredon-group-toolset-evolution/ Palo Alto Gamaredon Feb 2017
- https://www.secureworks.com/research/threat-profiles/iron-tilden Secureworks IRON TILDEN Profile
- https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/shuckworm-gamaredon-espionage-ukraine Symantec Shuckworm January 2022