MITRE ATT&CKsoftware (malware)

S0601 Hildegard

Published 2021-04-07 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Linux, Containers, IaaS
Version
1.2
Created
2021-04-07

Description

Hildegard is malware that targets misconfigured kubelets for initial access and runs cryptocurrency miner operations. The malware was first observed in January 2021. The TeamTNT activity group is believed to be behind Hildegard.

Related

Uses · MITRE ATT&CK (27)

  • T1685 Disable or Modify Tools technique
  • T1496.001 Compute Hijacking sub-technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1613 Container and Resource Discovery technique
  • T1611 Escape to Host technique
  • T1609 Container Administration Command technique
  • T1574.006 Dynamic Linker Hijacking sub-technique
  • T1059.004 Unix Shell sub-technique
  • T1552.005 Cloud Instance Metadata API sub-technique
  • T1036.004 Masquerade Task or Service sub-technique
  • T1027.002 Software Packing sub-technique
  • T1552.001 Credentials In Files sub-technique
  • T1552.004 Private Keys sub-technique
  • T1070.003 Clear Command History sub-technique
  • T1070.004 File Deletion sub-technique
  • T1136.001 Local Account sub-technique
  • T1543.002 Systemd Service sub-technique
  • T1219 Remote Access Tools technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1014 Rootkit technique
  • T1046 Network Service Discovery technique
  • T1068 Exploitation for Privilege Escalation technique
  • T1071 Application Layer Protocol technique
  • T1082 System Information Discovery technique
  • T1102 Web Service technique
  • T1105 Ingress Tool Transfer technique
  • T1133 External Remote Services technique

Referenced by MITRE ATT&CK · uses (1)

References