MITRE ATT&CKsoftware (tool)

S0692 SILENTTRINITY

Published 2022-03-23 Modified 2025-04-30 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2022-03-23

Description

SILENTTRINITY is an open source remote administration and post-exploitation framework primarily written in Python that includes stagers written in Powershell, C, and Boo. SILENTTRINITY was used in a 2019 campaign against Croatian government agencies by unidentified cyber actors.

Related

Uses · MITRE ATT&CK (53)

  • T1685 Disable or Modify Tools technique
  • T1689 Downgrade Attack technique
  • T1690 Prevent Command History Logging technique
  • T1680 Local Storage Discovery technique
  • T1620 Reflective Code Loading technique
  • T1555.004 Windows Credential Manager sub-technique
  • T1546.015 Component Object Model Hijacking sub-technique
  • T1564.003 Hidden Window sub-technique
  • T1069.001 Local Groups sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1059.006 Python sub-technique
  • T1069.002 Domain Groups sub-technique
  • T1087.002 Domain Account sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1134.001 Token Impersonation/Theft sub-technique
  • T1134.003 Make and Impersonate Token sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1559.001 Component Object Model sub-technique
  • T1003.001 LSASS Memory sub-technique
  • T1021.003 Distributed Component Object Model sub-technique
  • T1021.006 Windows Remote Management sub-technique
  • T1056.001 Keylogging sub-technique
  • T1056.002 GUI Input Capture sub-technique
  • T1552.006 Group Policy Preferences sub-technique
  • T1556 Modify Authentication Process technique
  • T1558.003 Kerberoasting sub-technique
  • T1070.004 File Deletion sub-technique
  • T1548.002 Bypass User Account Control sub-technique
  • T1546.001 Change Default File Association sub-technique
Show all 53 ›

References