MITRE ATT&CKsoftware (malware)

S0256 Mosquito

Published 2018-10-17 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.3
Created
2018-10-17

Description

Mosquito is a Win32 backdoor that has been used by Turla. Mosquito is made up of three parts: the installer, the launcher, and the backdoor. The main backdoor is called CommanderDLL and is launched by the loader program.

Related

Uses · MITRE ATT&CK (17)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1027.011 Fileless Storage sub-technique
  • T1546.015 Component Object Model Hijacking sub-technique
  • T1573.001 Symmetric Cryptography sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1070.004 File Deletion sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1016 System Network Configuration Discovery technique
  • T1033 System Owner/User Discovery technique
  • T1047 Windows Management Instrumentation technique
  • T1057 Process Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (1)

References