MITRE ATT&CKsoftware (malware)

S1158 DUSTPAN

Published 2024-09-16 Modified 2024-09-21 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-09-16

Description

DUSTPAN is an in-memory dropper written in C/C++ used by APT41 since 2021 that decrypts and executes an embedded payload.

Related

Uses · MITRE ATT&CK (6)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1027.009 Embedded Payloads sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1543.003 Windows Service sub-technique
  • T1055.002 Portable Executable Injection sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique

Referenced by MITRE ATT&CK · uses (2)

References