MITRE ATT&CKsoftware (malware)

S0153 RedLeaves

Published 2017-12-14 Modified 2024-09-12 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
BUGJUICE
Version
1.2
Created
2017-12-14

Description

RedLeaves is a malware family used by menuPass. The code overlaps with PlugX and may be based upon the open source tool Trochilus.

Related

Uses · MITRE ATT&CK (17)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1573.001 Symmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1571 Non-Standard Port technique
  • T1574.001 DLL sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1070.004 File Deletion sub-technique
  • T1547.009 Shortcut Modification sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1016 System Network Configuration Discovery technique
  • T1033 System Owner/User Discovery technique
  • T1049 System Network Connections Discovery technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1113 Screen Capture technique

Referenced by MITRE ATT&CK · uses (1)

References