MITRE ATT&CKsoftware (malware)
S0229 Orz
- Domain
- enterprise
- Platforms
- Windows
- Aliases
- AIRBREAK
- Version
- 2.2
- Created
- 2018-04-18
Description
Related
Uses · MITRE ATT&CK (13)
- T1102.002 Bidirectional Communication sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1218.010 Regsvr32 sub-technique
- T1055.012 Process Hollowing sub-technique
- T1518 Software Discovery technique
- T1016 System Network Configuration Discovery technique
- T1027 Obfuscated Files or Information technique
- T1057 Process Discovery technique
- T1070 Indicator Removal technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
- T1112 Modify Registry technique
Referenced by MITRE ATT&CK · uses (1)
- G0065 Leviathan group
References
- https://www.proofpoint.com/us/threat-insight/post/leviathan-espionage-actor-spearphishes-maritime-and-defense-targets Proofpoint Leviathan Oct 2017
- https://www.fireeye.com/blog/threat-research/2018/03/suspected-chinese-espionage-group-targeting-maritime-and-engineering-industries.html FireEye Periscope March 2018