MITRE ATT&CKsoftware (malware)
S0398 HyperBro
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.3
- Created
- 2019-07-09
Description
HyperBro is a custom in-memory backdoor used by Threat Group-3390.
Related
Uses · MITRE ATT&CK (12)
- T1027.013 Encrypted/Encoded File sub-technique
- T1071.001 Web Protocols sub-technique
- T1574.001 DLL sub-technique
- T1569.002 Service Execution sub-technique
- T1027.002 Software Packing sub-technique
- T1070.004 File Deletion sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1007 System Service Discovery technique
- T1055 Process Injection technique
- T1105 Ingress Tool Transfer technique
- T1106 Native API technique
- T1113 Screen Capture technique
Referenced by MITRE ATT&CK · uses (1)
- G0027 Threat Group-3390 group
References
- https://unit42.paloaltonetworks.com/emissary-panda-attacks-middle-east-government-sharepoint-servers/ Unit42 Emissary Panda May 2019
- https://thehackernews.com/2018/06/chinese-watering-hole-attack.html Hacker News LuckyMouse June 2018
- https://securelist.com/luckymouse-hits-national-data-center/86083/ Securelist LuckyMouse June 2018