MITRE ATT&CKsoftware (malware)

S0168 Gazer

Published 2018-01-16 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
WhiteBear
Version
1.3
Created
2018-01-16

Description

Gazer is a backdoor used by Turla since at least 2016.

Related

Uses · MITRE ATT&CK (18)

  • T1480.002 Mutual Exclusion sub-technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1573.001 Symmetric Cryptography sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1564.004 NTFS File Attributes sub-technique
  • T1553.002 Code Signing sub-technique
  • T1070.004 File Deletion sub-technique
  • T1070.006 Timestomp sub-technique
  • T1546.002 Screensaver sub-technique
  • T1547.004 Winlogon Helper DLL sub-technique
  • T1547.009 Shortcut Modification sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1055.003 Thread Execution Hijacking sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1033 System Owner/User Discovery technique
  • T1055 Process Injection technique
  • T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

References