MITRE ATT&CKsoftware (malware)
S0436 TSCookie
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2020-05-06
Description
Related
Uses · MITRE ATT&CK (13)
- T1573.001 Symmetric Cryptography sub-technique
- T1071.001 Web Protocols sub-technique
- T1204.001 Malicious Link sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1555.003 Credentials from Web Browsers sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1016 System Network Configuration Discovery technique
- T1055 Process Injection technique
- T1057 Process Discovery technique
- T1083 File and Directory Discovery technique
- T1090 Proxy technique
- T1095 Non-Application Layer Protocol technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0098 BlackTech group
References
- https://blogs.jpcert.or.jp/en/2018/03/malware-tscooki-7aa0.html JPCert PLEAD Downloader June 2018
- https://blogs.jpcert.or.jp/en/2018/03/malware-tscooki-7aa0.html JPCert TSCookie March 2018
- https://blogs.jpcert.or.jp/en/2019/09/tscookie-loader.html JPCert BlackTech Malware September 2019