MITRE ATT&CKsoftware (malware)
S0178 Truvasys
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2018-01-16
Description
Truvasys is first-stage malware that has been used by PROMETHIUM. It is a collection of modules written in the Delphi programming language.
Related
Uses · MITRE ATT&CK (2)
Referenced by MITRE ATT&CK · uses (1)
- G0056 PROMETHIUM group
References
- https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Backdoor:Win32/Truvasys.A!dha Microsoft Win Defender Truvasys Sep 2017
- https://blogs.technet.microsoft.com/mmpc/2016/12/14/twin-zero-day-attacks-promethium-and-neodymium-target-individuals-in-europe/ Microsoft NEODYMIUM Dec 2016
- http://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf Microsoft SIR Vol 21