MITRE ATT&CKsoftware (malware)

S1011 Tarrask

Published 2022-06-01 Modified 2025-04-16 Official page ↗

Domain: enterprise
Platforms: Windows
Version: 1.0
Created: 2022-06-01

Description

Tarrask is malware that has been used by HAFNIUM since at least August 2021. Tarrask was designed to evade digital defenses and maintain persistence by generating concealed scheduled tasks.

Uses · MITRE ATT&CK (7)

T1059.003 Windows Command Shell sub-technique
T1564 Hide Artifacts technique
T1134.001 Token Impersonation/Theft sub-technique
T1036.004 Masquerade Task or Service sub-technique
T1036.005 Match Legitimate Resource Name or Location sub-technique
T1053.005 Scheduled Task sub-technique
T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (1)

G0125 HAFNIUM group

References

https://www.microsoft.com/security/blog/2022/04/12/tarrask-malware-uses-scheduled-tasks-for-defense-evasion/ Tarrask scheduled task

S1011 Tarrask

Description

Related

Uses · MITRE ATT&CK (7)

Referenced by MITRE ATT&CK · uses (1)

References