MITRE ATT&CKsoftware (malware)

S0438 Attor

Published 2020-05-06 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2020-05-06

Description

Attor is a Windows-based espionage platform that has been seen in use since 2013. Attor has a loadable plugin architecture to customize functionality for specific targets.

Related

Uses · MITRE ATT&CK (35)

  • T1680 Local Storage Discovery technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1573.001 Symmetric Cryptography sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.002 File Transfer Protocols sub-technique
  • T1090.003 Multi-hop Proxy sub-technique
  • T1074.001 Local Data Staging sub-technique
  • T1569.002 Service Execution sub-technique
  • T1497.001 System Checks sub-technique
  • T1564.001 Hidden Files and Directories sub-technique
  • T1560.003 Archive via Custom Method sub-technique
  • T1056.001 Keylogging sub-technique
  • T1036.004 Masquerade Task or Service sub-technique
  • T1070.004 File Deletion sub-technique
  • T1070.006 Timestomp sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1543.003 Windows Service sub-technique
  • T1055.004 Asynchronous Procedure Call sub-technique
  • T1037.001 Logon Script (Windows) sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1010 Application Window Discovery technique
  • T1012 Query Registry technique
  • T1020 Automated Exfiltration technique
  • T1041 Exfiltration Over C2 Channel technique
  • T1055 Process Injection technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1112 Modify Registry technique
  • T1113 Screen Capture technique
Show all 35 ›

References