MITRE ATT&CKsoftware (malware)
S1166 Solar
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2024-11-21
Description
Solar is a C#/.NET backdoor that was used by OilRig during the Outer Space campaign to download, execute, and exfiltrate files.
Related
Uses · MITRE ATT&CK (8)
- T1573.001 Symmetric Cryptography sub-technique
- T1132.001 Standard Encoding sub-technique
- T1070.004 File Deletion sub-technique
- T1053.005 Scheduled Task sub-technique
- T1020 Automated Exfiltration technique
- T1041 Exfiltration Over C2 Channel technique
- T1082 System Information Discovery technique
- T1105 Ingress Tool Transfer technique
References
- https://www.welivesecurity.com/en/eset-research/oilrigs-outer-space-juicy-mix-same-ol-rig-new-drill-pipes/ ESET OilRig Campaigns Sep 2023