MITRE ATT&CKsoftware (malware)

S0531 Grandoreiro

Published 2020-11-10 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.2
Created
2020-11-10

Description

Grandoreiro is a banking trojan written in Delphi that was first observed in 2016 and uses a Malware-as-a-Service (MaaS) business model. Grandoreiro has confirmed victims in Brazil, Mexico, Portugal, and Spain.

Related

Uses · MITRE ATT&CK (43)

  • T1685 Disable or Modify Tools technique
  • T1686 Disable or Modify System Firewall technique
  • T1686.002 Network Device Firewall sub-technique
  • T1176.001 Browser Extensions sub-technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1027.011 Fileless Storage sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1102.001 Dead Drop Resolver sub-technique
  • T1102.002 Bidirectional Communication sub-technique
  • T1204.001 Malicious Link sub-technique
  • T1204.002 Malicious File sub-technique
  • T1568.002 Domain Generation Algorithms sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1497.001 System Checks sub-technique
  • T1566.002 Spearphishing Link sub-technique
  • T1087.003 Email Account sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1056.001 Keylogging sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1027.001 Binary Padding sub-technique
  • T1222.001 Windows Permissions sub-technique
  • T1070.004 File Deletion sub-technique
  • T1548.002 Bypass User Account Control sub-technique
  • T1218.007 Msiexec sub-technique
  • T1547.009 Shortcut Modification sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1539 Steal Web Session Cookie technique
  • T1189 Drive-by Compromise technique
Show all 43 ›

References