MITRE ATT&CKsoftware (malware)

S1064 SVCReady

Published 2023-02-10 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2023-02-10

Description

SVCReady is a loader that has been used since at least April 2022 in malicious spam campaigns. Security researchers have noted overlaps between TA551 activity and SVCReady distribution, including similarities in file names, lure images, and identical grammatical errors.

Related

Uses · MITRE ATT&CK (24)

  • T1546.015 Component Object Model Hijacking sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1497.001 System Checks sub-technique
  • T1497.003 Time Based Checks sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1036.004 Masquerade Task or Service sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1518 Software Discovery technique
  • T1005 Data from Local System technique
  • T1012 Query Registry technique
  • T1027 Obfuscated Files or Information technique
  • T1033 System Owner/User Discovery technique
  • T1041 Exfiltration Over C2 Channel technique
  • T1047 Windows Management Instrumentation technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1113 Screen Capture technique
  • T1120 Peripheral Device Discovery technique
  • T1124 System Time Discovery technique

References