MITRE ATT&CKsoftware (malware)
S0547 DropBook
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2020-12-22
Description
DropBook is a Python-based backdoor compiled with PyInstaller.
Related
Uses · MITRE ATT&CK (9)
- T1614.001 System Language Discovery sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1059.006 Python sub-technique
- T1567 Exfiltration Over Web Service technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1102 Web Service technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0021 Molerats group
References
- https://www.cybereason.com/hubfs/dam/collateral/reports/Molerats-in-the-Cloud-New-Malware-Arsenal-Abuses-Cloud-Platforms-in-Middle-East-Espionage-Campaign.pdf Cybereason Molerats Dec 2020
- https://www.bleepingcomputer.com/news/security/hacking-group-s-new-malware-abuses-google-and-facebook-services/ BleepingComputer Molerats Dec 2020