MITRE ATT&CKsoftware (malware)

S0456 Aria-body

Published 2020-05-26 Modified 2025-10-22 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.3
Created
2020-05-26

Description

Aria-body is a custom backdoor that has been used by Naikon since approximately 2017.

Related

Uses · MITRE ATT&CK (24)

  • T1680 Local Storage Discovery technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1568.002 Domain Generation Algorithms sub-technique
  • T1560 Archive Collected Data technique
  • T1134.001 Token Impersonation/Theft sub-technique
  • T1134.002 Create Process with Token sub-technique
  • T1070.004 File Deletion sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1055.001 Dynamic-link Library Injection sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1010 Application Window Discovery technique
  • T1016 System Network Configuration Discovery technique
  • T1025 Data from Removable Media technique
  • T1033 System Owner/User Discovery technique
  • T1049 System Network Connections Discovery technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1090 Proxy technique
  • T1095 Non-Application Layer Protocol technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1113 Screen Capture technique

Referenced by MITRE ATT&CK · uses (1)

References