MITRE ATT&CKsoftware (malware)
S0543 Spark
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2020-12-15
Description
Spark is a Windows backdoor and has been in use since as early as 2017.
Related
Uses · MITRE ATT&CK (10)
- T1614.001 System Language Discovery sub-technique
- T1071.001 Web Protocols sub-technique
- T1132.001 Standard Encoding sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1497.002 User Activity Based Checks sub-technique
- T1027.002 Software Packing sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1033 System Owner/User Discovery technique
- T1041 Exfiltration Over C2 Channel technique
- T1082 System Information Discovery technique
Referenced by MITRE ATT&CK · uses (1)
- G0021 Molerats group
References
- https://unit42.paloaltonetworks.com/molerats-delivers-spark-backdoor/ Unit42 Molerat Mar 2020