MITRE ATT&CKsoftware (malware)

S0180 Volgmer

Published 2018-01-16 Modified 2024-04-10 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.3
Created
2018-01-16

Description

Volgmer is a backdoor Trojan designed to provide covert access to a compromised system. It has been used since at least 2013 to target the government, financial, automotive, and media industries. Its primary delivery mechanism is suspected to be spearphishing.

Related

Uses · MITRE ATT&CK (19)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1027.011 Fileless Storage sub-technique
  • T1573.001 Symmetric Cryptography sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1036.004 Masquerade Task or Service sub-technique
  • T1070.004 File Deletion sub-technique
  • T1543.003 Windows Service sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1007 System Service Discovery technique
  • T1012 Query Registry technique
  • T1016 System Network Configuration Discovery technique
  • T1049 System Network Connections Discovery technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (1)

  • G0032 Lazarus Group group

References