MITRE ATT&CKsoftware (malware)
S0270 RogueRobin
- Domain
- enterprise
- Platforms
- Windows
- Version
- 2.2
- Created
- 2018-10-17
Description
RogueRobin is a payload used by DarkHydrus that has been developed in PowerShell and C#.
Related
Uses · MITRE ATT&CK (18)
- T1027.010 Command Obfuscation sub-technique
- T1102.002 Bidirectional Communication sub-technique
- T1132.001 Standard Encoding sub-technique
- T1059.001 PowerShell sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1497.001 System Checks sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1547.009 Shortcut Modification sub-technique
- T1218.010 Regsvr32 sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1016 System Network Configuration Discovery technique
- T1033 System Owner/User Discovery technique
- T1047 Windows Management Instrumentation technique
- T1057 Process Discovery technique
- T1082 System Information Discovery technique
- T1105 Ingress Tool Transfer technique
- T1113 Screen Capture technique
Referenced by MITRE ATT&CK · uses (1)
- G0079 DarkHydrus group