MITRE ATT&CKsoftware (malware)

S1146 MgBot

Published 2024-07-25 Modified 2024-10-10 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-07-25

Description

MgBot is a modular malware framework exclusively associated with Daggerfly operations since at least 2012. MgBot was developed in C++ and features a module design with multiple available plugins that have been under active development through 2024.

Related

Uses · MITRE ATT&CK (17)

  • T1213.006 Databases sub-technique
  • T1087.001 Local Account sub-technique
  • T1087.002 Domain Account sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1056.001 Keylogging sub-technique
  • T1555 Credentials from Password Stores technique
  • T1539 Steal Web Session Cookie technique
  • T1482 Domain Trust Discovery technique
  • T1003 OS Credential Dumping technique
  • T1005 Data from Local System technique
  • T1018 Remote System Discovery technique
  • T1025 Data from Removable Media technique
  • T1033 System Owner/User Discovery technique
  • T1046 Network Service Discovery technique
  • T1057 Process Discovery technique
  • T1115 Clipboard Data technique
  • T1123 Audio Capture technique

Referenced by MITRE ATT&CK · uses (1)

References