MITRE ATT&CKsoftware (malware)
S0582 LookBack
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2021-03-01
Description
Related
Uses · MITRE ATT&CK (16)
- T1573.001 Symmetric Cryptography sub-technique
- T1071.001 Web Protocols sub-technique
- T1574.001 DLL sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1059.005 Visual Basic sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1070.004 File Deletion sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1529 System Shutdown/Reboot technique
- T1489 Service Stop technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1007 System Service Discovery technique
- T1057 Process Discovery technique
- T1083 File and Directory Discovery technique
- T1095 Non-Application Layer Protocol technique
- T1113 Screen Capture technique
References
- https://www.proofpoint.com/us/threat-insight/post/lookback-malware-targets-united-states-utilities-sector-phishing-attacks Proofpoint LookBack Malware Aug 2019
- https://www.dragos.com/threat/talonite/ Dragos TALONITE
- https://hub.dragos.com/hubfs/Year-in-Review/Dragos_2020_ICS_Cybersecurity_Year_In_Review.pdf?hsCtaTracking=159c0fc3-92d8-425d-aeb8-12824f2297e8%7Cf163726d-579b-4996-9a04-44e5a124d770 Dragos Threat Report 2020