MITRE ATT&CKsoftware (malware)

S1018 Saint Bot

Published 2022-06-09 Modified 2024-10-08 Official page ↗
Domain
enterprise
Platforms
Windows
Version
2.0
Created
2022-06-09

Description

Saint Bot is a .NET downloader that has been used by Saint Bear since at least March 2021.

Related

Uses · MITRE ATT&CK (37)

  • T1622 Debugger Evasion technique
  • T1614 System Location Discovery technique
  • T1071.001 Web Protocols sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1574 Hijack Execution Flow technique
  • T1204.001 Malicious Link sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1497.001 System Checks sub-technique
  • T1497.003 Time Based Checks sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1566.002 Spearphishing Link sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1027.002 Software Packing sub-technique
  • T1070.004 File Deletion sub-technique
  • T1548.002 Bypass User Account Control sub-technique
  • T1218.004 InstallUtil sub-technique
  • T1218.010 Regsvr32 sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1055.001 Dynamic-link Library Injection sub-technique
  • T1055.004 Asynchronous Procedure Call sub-technique
  • T1055.012 Process Hollowing sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1005 Data from Local System technique
  • T1012 Query Registry technique
  • T1016 System Network Configuration Discovery technique
  • T1027 Obfuscated Files or Information technique
Show all 37 ›

Referenced by MITRE ATT&CK · uses (2)

References