MITRE ATT&CKsoftware (malware)

S1097 HUI Loader

Published 2023-12-22 Modified 2024-01-02 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2023-12-22

Description

HUI Loader is a custom DLL loader that has been used since at least 2015 by China-based threat groups including Cinnamon Tempest and menuPass to deploy malware on compromised hosts. HUI Loader has been observed in campaigns loading SodaMaster, PlugX, Cobalt Strike, Komplex, and several strains of ransomware.

Related

Uses · MITRE ATT&CK (3)

  • T1685 Disable or Modify Tools technique
  • T1574.001 DLL sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique

Referenced by MITRE ATT&CK · uses (2)

  • G1021 Cinnamon Tempest group
  • G0045 menuPass group

References