MITRE ATT&CKsoftware (malware)

S0518 PolyglotDuke

Published 2020-09-23 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2020-09-23

Description

PolyglotDuke is a downloader that has been used by APT29 since at least 2013. PolyglotDuke has been used to drop MiniDuke.

Related

Uses · MITRE ATT&CK (10)

  • T1027.011 Fileless Storage sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1102.001 Dead Drop Resolver sub-technique
  • T1027.003 Steganography sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1027 Obfuscated Files or Information technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (2)

References