MITRE ATT&CKsoftware (malware)
S0176 Wingbird
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2018-01-16
Description
Related
Uses · MITRE ATT&CK (9)
- T1574.001 DLL sub-technique
- T1569.002 Service Execution sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1070.004 File Deletion sub-technique
- T1547.008 LSASS Driver sub-technique
- T1543.003 Windows Service sub-technique
- T1055 Process Injection technique
- T1068 Exploitation for Privilege Escalation technique
- T1082 System Information Discovery technique
Referenced by MITRE ATT&CK · uses (1)
- G0055 NEODYMIUM group
References
- http://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf Microsoft SIR Vol 21
- https://blogs.technet.microsoft.com/mmpc/2016/12/14/twin-zero-day-attacks-promethium-and-neodymium-target-individuals-in-europe/ Microsoft NEODYMIUM Dec 2016
- https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Backdoor:Win32/Wingbird.A!dha Microsoft Wingbird Nov 2017