MITRE ATT&CKsoftware (malware)
S0653 xCaon
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2021-09-29
Description
xCaon is an HTTP variant of the BoxCaon malware family that has used by IndigoZebra since at least 2014. xCaon has been used to target political entities in Central Asia, including Kyrgyzstan and Uzbekistan.
Related
Uses · MITRE ATT&CK (11)
- T1573.001 Symmetric Cryptography sub-technique
- T1071.001 Web Protocols sub-technique
- T1132.001 Standard Encoding sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1547 Boot or Logon Autostart Execution technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1005 Data from Local System technique
- T1016 System Network Configuration Discovery technique
- T1105 Ingress Tool Transfer technique
- T1106 Native API technique
Referenced by MITRE ATT&CK · uses (1)
- G0136 IndigoZebra group
References
- https://research.checkpoint.com/2021/indigozebra-apt-continues-to-attack-central-asia-with-evolving-tools/ Checkpoint IndigoZebra July 2021
- https://securelist.com/apt-trends-report-q2-2017/79332/ Securelist APT Trends Q2 2017