MITRE ATT&CKsoftware (malware)
S0337 BadPatch
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2019-01-29
Description
BadPatch is a Windows Trojan that was used in a Gaza Hackers-linked campaign.
Related
Uses · MITRE ATT&CK (12)
- T1071.001 Web Protocols sub-technique
- T1071.003 Mail Protocols sub-technique
- T1074.001 Local Data Staging sub-technique
- T1497.001 System Checks sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1056.001 Keylogging sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1005 Data from Local System technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
- T1113 Screen Capture technique
References
- https://researchcenter.paloaltonetworks.com/2017/10/unit42-badpatch/ Unit 42 BadPatch Oct 2017