MITRE ATT&CKsoftware (malware)

S1052 DEADEYE

Published 2022-12-20 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
DEADEYE.EMBED, DEADEYE.APPEND
Version
1.1
Created
2022-12-20

Description

DEADEYE is a malware launcher that has been used by APT41 since at least May 2021. DEADEYE has variants that can either embed a payload inside a compiled binary (DEADEYE.EMBED) or append it to the end of a file (DEADEYE.APPEND).

Related

Uses · MITRE ATT&CK (12)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1027.009 Embedded Payloads sub-technique
  • T1564.004 NTFS File Attributes sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1036.004 Masquerade Task or Service sub-technique
  • T1218.007 Msiexec sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1480 Execution Guardrails technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1016 System Network Configuration Discovery technique
  • T1082 System Information Discovery technique
  • T1106 Native API technique

Referenced by MITRE ATT&CK · uses (1)

References