Sec
Lookup
Search
MITRE ATT&CK
software (malware)
S0255
DDKONG
Published 2018-10-17
Modified 2024-09-04
Official page ↗
Domain
enterprise
Version
1.0
Created
2018-10-17
Description
DDKONG
is a malware sample that was part of a campaign by
Rancor
.
DDKONG
was first seen used in February 2017.
Related
Uses · MITRE ATT&CK
(4)
T1218.011
Rundll32
sub-technique
T1140
Deobfuscate/Decode Files or Information
technique
T1083
File and Directory Discovery
technique
T1105
Ingress Tool Transfer
technique
Referenced by MITRE ATT&CK · uses
(1)
G0075
Rancor
group
References
https://researchcenter.paloaltonetworks.com/2018/06/unit42-rancor-targeted-attacks-south-east-asia-using-plaintee-ddkong-malware-families/
Rancor Unit42 June 2018