MITRE ATT&CKsoftware (malware)
S1140 Spica
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2024-06-18
Description
Spica is a custom backdoor written in Rust that has been used by Star Blizzard since at least 2023.
Related
Uses · MITRE ATT&CK (9)
- T1059.001 PowerShell sub-technique
- T1560 Archive Collected Data technique
- T1036.004 Masquerade Task or Service sub-technique
- T1053.005 Scheduled Task sub-technique
- T1539 Steal Web Session Cookie technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1083 File and Directory Discovery technique
- T1095 Non-Application Layer Protocol technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G1033 Star Blizzard group
References
- https://blog.google/threat-analysis-group/google-tag-coldriver-russian-phishing-malware/ Google TAG COLDRIVER January 2024