MITRE ATT&CKsoftware (malware)

S0172 Reaver

Published 2018-01-16 Modified 2025-10-22 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.3
Created
2018-01-16

Description

Reaver is a malware family that has been in the wild since at least late 2016. Reporting indicates victims have primarily been associated with the "Five Poisons," which are movements the Chinese government considers dangerous. The type of malware is rare due to its final payload being in the form of Control Panel items.

Related

Uses · MITRE ATT&CK (14)

  • T1680 Local Storage Discovery technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1560.003 Archive via Custom Method sub-technique
  • T1070.004 File Deletion sub-technique
  • T1547.009 Shortcut Modification sub-technique
  • T1218.002 Control Panel sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1543.003 Windows Service sub-technique
  • T1012 Query Registry technique
  • T1016 System Network Configuration Discovery technique
  • T1033 System Owner/User Discovery technique
  • T1082 System Information Discovery technique
  • T1095 Non-Application Layer Protocol technique

References