MITRE ATT&CKsoftware (malware)

S1122 Mispadu

Published 2024-03-13 Modified 2024-04-18 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-03-13

Description

Mispadu is a banking trojan written in Delphi that was first observed in 2019 and uses a Malware-as-a-Service (MaaS) business model. This malware is operated, managed, and sold by the Malteiro cybercriminal group. Mispadu has mainly been used to target victims in Brazil and Mexico, and has also had confirmed operations throughout Latin America and Europe.

Related

Uses · MITRE ATT&CK (26)

  • T1176.001 Browser Extensions sub-technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1614.001 System Language Discovery sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1497.001 System Checks sub-technique
  • T1566.002 Spearphishing Link sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1056.001 Keylogging sub-technique
  • T1056.002 GUI Input Capture sub-technique
  • T1555 Credentials from Password Stores technique
  • T1218.007 Msiexec sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1217 Browser Information Discovery technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1041 Exfiltration Over C2 Channel technique
  • T1055 Process Injection technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1106 Native API technique
  • T1113 Screen Capture technique
  • T1115 Clipboard Data technique

Referenced by MITRE ATT&CK · uses (1)

References