MITRE ATT&CKsoftware (malware)
S0394 HiddenWasp
- Domain
- enterprise
- Platforms
- Linux
- Version
- 1.3
- Created
- 2019-06-24
Description
HiddenWasp is a Linux-based Trojan used to target systems for remote control. It comes in the form of a statically linked ELF binary with stdlibc++.
Related
Uses · MITRE ATT&CK (10)
- T1027.013 Encrypted/Encoded File sub-technique
- T1573.001 Symmetric Cryptography sub-technique
- T1574.006 Dynamic Linker Hijacking sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1136.001 Local Account sub-technique
- T1037.004 RC Scripts sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1014 Rootkit technique
- T1095 Non-Application Layer Protocol technique
- T1105 Ingress Tool Transfer technique
References
- https://www.intezer.com/blog-hiddenwasp-malware-targeting-linux-systems/ Intezer HiddenWasp Map 2019