MITRE ATT&CKsoftware (malware)
S0263 TYPEFRAME
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.3
- Created
- 2018-10-17
Description
TYPEFRAME is a remote access tool that has been used by Lazarus Group.
Related
Uses · MITRE ATT&CK (15)
- T1686.003 Windows Host Firewall sub-technique
- T1680 Local Storage Discovery technique
- T1027.013 Encrypted/Encoded File sub-technique
- T1027.011 Fileless Storage sub-technique
- T1571 Non-Standard Port technique
- T1204.002 Malicious File sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1059.005 Visual Basic sub-technique
- T1070.004 File Deletion sub-technique
- T1543.003 Windows Service sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1083 File and Directory Discovery technique
- T1090 Proxy technique
- T1105 Ingress Tool Transfer technique
- T1112 Modify Registry technique
Referenced by MITRE ATT&CK · uses (1)
- G0032 Lazarus Group group
References
- https://www.us-cert.gov/ncas/analysis-reports/AR18-165A US-CERT TYPEFRAME June 2018