MITRE ATT&CKsoftware (malware)
S0330 Zeus Panda
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.4
- Created
- 2019-01-29
Description
Zeus Panda is a Trojan designed to steal banking information and other sensitive credentials for exfiltration. Zeus Panda’s original source code was leaked in 2011, allowing threat actors to use its source code as a basis for new malware variants. It is mainly used to target Windows operating systems ranging from Windows XP through Windows 10.
Related
Uses · MITRE ATT&CK (23)
- T1027.013 Encrypted/Encoded File sub-technique
- T1027.010 Command Obfuscation sub-technique
- T1614.001 System Language Discovery sub-technique
- T1071.001 Web Protocols sub-technique
- T1059.001 PowerShell sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1056.001 Keylogging sub-technique
- T1056.004 Credential API Hooking sub-technique
- T1070.004 File Deletion sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1055.002 Portable Executable Injection sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1012 Query Registry technique
- T1057 Process Discovery technique
- T1059 Command and Scripting Interpreter technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
- T1112 Modify Registry technique
- T1113 Screen Capture technique
- T1115 Clipboard Data technique
- T1124 System Time Discovery technique
References
- https://blog.talosintelligence.com/2017/11/zeus-panda-campaign.html#More Talos Zeus Panda Nov 2017
- https://cyberwtf.files.wordpress.com/2017/07/panda-whitepaper.pdf GDATA Zeus Panda June 2017