MITRE ATT&CKsoftware (malware)
S0396 EvilBunny
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.3
- Created
- 2019-06-28
Description
EvilBunny is a C++ malware sample observed since 2011 that was designed to be a execution platform for Lua scripts.
Related
Uses · MITRE ATT&CK (15)
- T1059.011 Lua sub-technique
- T1071.001 Web Protocols sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1497.001 System Checks sub-technique
- T1497.003 Time Based Checks sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1070.004 File Deletion sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1053.005 Scheduled Task sub-technique
- T1203 Exploitation for Client Execution technique
- T1047 Windows Management Instrumentation technique
- T1057 Process Discovery technique
- T1105 Ingress Tool Transfer technique
- T1106 Native API technique
- T1124 System Time Discovery technique
References
- https://web.archive.org/web/20150311013500/http://www.cyphort.com/evilbunny-malware-instrumented-lua/ Cyphort EvilBunny Dec 2014