MITRE ATT&CKsoftware (malware)
S1133 Apostle
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2024-05-22
Description
Apostle is malware that has functioned as both a wiper and, in more recent versions, as ransomware. Apostle is written in .NET and shares various programming and functional overlaps with IPsec Helper.
Related
Uses · MITRE ATT&CK (10)
- T1685.005 Clear Windows Event Logs sub-technique
- T1561.001 Disk Content Wipe sub-technique
- T1070.004 File Deletion sub-technique
- T1053.005 Scheduled Task sub-technique
- T1529 System Shutdown/Reboot technique
- T1486 Data Encrypted for Impact technique
- T1485 Data Destruction technique
- T1480 Execution Guardrails technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1057 Process Discovery technique
Referenced by MITRE ATT&CK · uses (1)
- G1030 Agrius group
References
- https://assets.sentinelone.com/sentinellabs/evol-agrius SentinelOne Agrius 2021