MITRE ATT&CKsoftware (malware)
S0171 Felismus
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2018-01-16
Description
Related
Uses · MITRE ATT&CK (10)
- T1573.001 Symmetric Cryptography sub-technique
- T1071.001 Web Protocols sub-technique
- T1132.001 Standard Encoding sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1016 System Network Configuration Discovery technique
- T1033 System Owner/User Discovery technique
- T1082 System Information Discovery technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0054 Sowbug group
References
- https://www.symantec.com/connect/blogs/sowbug-cyber-espionage-group-targets-south-american-and-southeast-asian-governments Symantec Sowbug Nov 2017
- https://blogs.forcepoint.com/security-labs/playing-cat-mouse-introducing-felismus-malware Forcepoint Felismus Mar 2017