MITRE ATT&CKsoftware (malware)
S0514 WellMess
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2020-09-24
Description
Related
Uses · MITRE ATT&CK (15)
- T1573.001 Symmetric Cryptography sub-technique
- T1573.002 Asymmetric Cryptography sub-technique
- T1001.001 Junk Data sub-technique
- T1071.001 Web Protocols sub-technique
- T1071.004 DNS sub-technique
- T1132.001 Standard Encoding sub-technique
- T1059.001 PowerShell sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1069.002 Domain Groups sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1005 Data from Local System technique
- T1016 System Network Configuration Discovery technique
- T1033 System Owner/User Discovery technique
- T1082 System Information Discovery technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0016 APT29 group
References
- https://us-cert.cisa.gov/ncas/analysis-reports/ar20-198b CISA WellMess July 2020
- https://www.pwc.co.uk/issues/cyber-security-services/insights/cleaning-up-after-wellmess.html PWC WellMess July 2020
- https://www.ncsc.gov.uk/files/Advisory-APT29-targets-COVID-19-vaccine-development-V1-1.pdf NCSC APT29 July 2020