MITRE ATT&CKsoftware (malware)

S0269 QUADAGENT

Published 2018-10-17 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.2
Created
2018-10-17

Description

QUADAGENT is a PowerShell backdoor used by OilRig.

Related

Uses · MITRE ATT&CK (17)

  • T1027.011 Fileless Storage sub-technique
  • T1027.010 Command Obfuscation sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1071.004 DNS sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1070.004 File Deletion sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1008 Fallback Channels technique
  • T1012 Query Registry technique
  • T1016 System Network Configuration Discovery technique
  • T1033 System Owner/User Discovery technique
  • T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (1)

References