MITRE ATT&CKsoftware (malware)

S0152 EvilGrab

Published 2017-12-14 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2017-12-14

Description

EvilGrab is a malware family with common reconnaissance capabilities. It has been deployed by menuPass via malicious Microsoft Office documents as part of spearphishing campaigns.

Related

Uses · MITRE ATT&CK (5)

  • T1056.001 Keylogging sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1113 Screen Capture technique
  • T1123 Audio Capture technique
  • T1125 Video Capture technique

Referenced by MITRE ATT&CK · uses (1)

References