MITRE ATT&CKsoftware (malware)
S1156 Manjusaka
- Domain
- enterprise
- Platforms
- Linux, Windows
- Version
- 1.0
- Created
- 2024-09-04
Description
Manjusaka is a Chinese-language intrusion framework, similar to Sliver and Cobalt Strike, with an ELF binary written in GoLang as the controller for Windows and Linux implants written in Rust. First identified in 2022, Manjusaka consists of multiple components, only one of which (a command and control module) is freely available.
Related
Uses · MITRE ATT&CK (10)
- T1071.001 Web Protocols sub-technique
- T1132.001 Standard Encoding sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1555.003 Credentials from Web Browsers sub-technique
- T1555 Credentials from Password Stores technique
- T1016 System Network Configuration Discovery technique
- T1041 Exfiltration Over C2 Channel technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1113 Screen Capture technique
References
- https://blog.talosintelligence.com/manjusaka-offensive-framework/ Talos Manjusaka 2022