MITRE ATT&CKsoftware (malware)

S1159 DUSTTRAP

Published 2024-09-16 Modified 2024-09-21 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-09-16

Description

DUSTTRAP is a multi-stage plugin framework associated with APT41 operations with multiple components.

Related

Uses · MITRE ATT&CK (29)

  • T1685.005 Clear Windows Event Logs sub-technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1654 Log Enumeration technique
  • T1027.009 Embedded Payloads sub-technique
  • T1615 Group Policy Discovery technique
  • T1059.003 Windows Command Shell sub-technique
  • T1497.001 System Checks sub-technique
  • T1087.001 Local Account sub-technique
  • T1087.002 Domain Account sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1056.001 Keylogging sub-technique
  • T1070.005 Network Share Connection Removal sub-technique
  • T1482 Domain Trust Discovery technique
  • T1135 Network Share Discovery technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1005 Data from Local System technique
  • T1010 Application Window Discovery technique
  • T1012 Query Registry technique
  • T1016 System Network Configuration Discovery technique
  • T1018 Remote System Discovery technique
  • T1041 Exfiltration Over C2 Channel technique
  • T1055 Process Injection technique
  • T1057 Process Discovery technique
  • T1070 Indicator Removal technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1113 Screen Capture technique
  • T1124 System Time Discovery technique

Referenced by MITRE ATT&CK · uses (2)

References