MITRE ATT&CKsoftware (malware)

S0586 TAINTEDSCRIBE

Published 2021-03-05 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2021-03-05

Description

TAINTEDSCRIBE is a fully-featured beaconing implant integrated with command modules used by Lazarus Group. It was first reported in May 2020.

Related

Uses · MITRE ATT&CK (16)

  • T1680 Local Storage Discovery technique
  • T1573.001 Symmetric Cryptography sub-technique
  • T1001.003 Protocol or Service Impersonation sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1560 Archive Collected Data technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1027.001 Binary Padding sub-technique
  • T1070.004 File Deletion sub-technique
  • T1070.006 Timestomp sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1008 Fallback Channels technique
  • T1018 Remote System Discovery technique
  • T1057 Process Discovery technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1124 System Time Discovery technique

Referenced by MITRE ATT&CK · uses (1)

  • G0032 Lazarus Group group

References