MITRE ATT&CKsoftware (malware)
S1090 NightClub
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2023-09-27
Description
NightClub is a modular implant written in C++ that has been used by MoustachedBouncer since at least 2014.
Related
Uses · MITRE ATT&CK (21)
- T1071.003 Mail Protocols sub-technique
- T1071.004 DNS sub-technique
- T1132.002 Non-Standard Encoding sub-technique
- T1074.001 Local Data Staging sub-technique
- T1056.001 Keylogging sub-technique
- T1036.004 Masquerade Task or Service sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1070.006 Timestomp sub-technique
- T1543.003 Windows Service sub-technique
- T1005 Data from Local System technique
- T1010 Application Window Discovery technique
- T1027 Obfuscated Files or Information technique
- T1041 Exfiltration Over C2 Channel technique
- T1057 Process Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
- T1106 Native API technique
- T1112 Modify Registry technique
- T1113 Screen Capture technique
- T1120 Peripheral Device Discovery technique
- T1123 Audio Capture technique
Referenced by MITRE ATT&CK · uses (1)
- G1019 MoustachedBouncer group
References
- https://www.welivesecurity.com/en/eset-research/moustachedbouncer-espionage-against-foreign-diplomats-in-belarus/ MoustachedBouncer ESET August 2023