MITRE ATT&CKsoftware (malware)
S0491 StrongPity
- Domain
- enterprise, mobile
- Platforms
- Windows, Android
- Version
- 2.0
- Created
- 2020-07-20
Description
StrongPity is an information stealing malware used by PROMETHIUM.
Related
Uses · MITRE ATT&CK (27)
- T1685 Disable or Modify Tools technique
- T1680 Local Storage Discovery technique
- T1027.013 Encrypted/Encoded File sub-technique
- T1573.002 Asymmetric Cryptography sub-technique
- T1071.001 Web Protocols sub-technique
- T1090.003 Multi-hop Proxy sub-technique
- T1571 Non-Standard Port technique
- T1564.003 Hidden Window sub-technique
- T1204.002 Malicious File sub-technique
- T1569.002 Service Execution sub-technique
- T1059.001 PowerShell sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1560.003 Archive via Custom Method sub-technique
- T1036.004 Masquerade Task or Service sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1553.002 Code Signing sub-technique
- T1070.004 File Deletion sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1543.003 Windows Service sub-technique
- T1476 Deliver Malicious Application via Other Means technique
- T1016 System Network Configuration Discovery technique
- T1020 Automated Exfiltration technique
- T1041 Exfiltration Over C2 Channel technique
- T1057 Process Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
- T1119 Automated Collection technique
References
- https://blog.talosintelligence.com/2020/06/promethium-extends-with-strongpity3.html Talos Promethium June 2020
- https://www.bitdefender.com/files/News/CaseStudies/study/353/Bitdefender-Whitepaper-StrongPity-APT.pdf Bitdefender StrongPity June 2020