MITRE ATT&CKsoftware (malware)

S0196 PUNCHBUGGY

Published 2018-04-18 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
ShellTea
Version
2.1
Created
2018-04-18

Description

PUNCHBUGGY is a backdoor malware used by FIN8 that has been observed targeting POS networks in the hospitality industry.

Related

Uses · MITRE ATT&CK (17)

  • T1071.001 Web Protocols sub-technique
  • T1074.001 Local Data Staging sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.006 Python sub-technique
  • T1087.001 Local Account sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1560.001 Archive via Utility sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1070.004 File Deletion sub-technique
  • T1546.009 AppCert DLLs sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1027 Obfuscated Files or Information technique
  • T1082 System Information Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1129 Shared Modules technique

Referenced by MITRE ATT&CK · uses (1)

References