MITRE ATT&CKsoftware (malware)

S0579 Waterbear

Published 2021-02-22 Modified 2024-04-10 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.2
Created
2021-02-22

Description

Waterbear is modular malware attributed to BlackTech that has been used primarily for lateral movement, decrypting, and triggering payloads and is capable of hiding network behaviors.

Related

Uses · MITRE ATT&CK (14)

  • T1685 Disable or Modify Tools technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1027.005 Indicator Removal from Tools sub-technique
  • T1574.001 DLL sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1055.003 Thread Execution Hijacking sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1012 Query Registry technique
  • T1049 System Network Connections Discovery technique
  • T1055 Process Injection technique
  • T1057 Process Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (1)

References