MITRE ATT&CKsoftware (tool)
S0527 CSPY Downloader
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2020-11-09
Description
CSPY Downloader is a tool designed to evade analysis and download additional payloads used by Kimsuky.
Related
Uses · MITRE ATT&CK (12)
- T1071.001 Web Protocols sub-technique
- T1204.002 Malicious File sub-technique
- T1497.001 System Checks sub-technique
- T1036.004 Masquerade Task or Service sub-technique
- T1027.002 Software Packing sub-technique
- T1553.002 Code Signing sub-technique
- T1070.004 File Deletion sub-technique
- T1548.002 Bypass User Account Control sub-technique
- T1053.005 Scheduled Task sub-technique
- T1070 Indicator Removal technique
- T1105 Ingress Tool Transfer technique
- T1112 Modify Registry technique
Referenced by MITRE ATT&CK · uses (1)
- G0094 Kimsuky group
References
- https://www.cybereason.com/blog/back-to-the-future-inside-the-kimsuky-kgh-spyware-suite Cybereason Kimsuky November 2020