MITRE ATT&CKsoftware (malware)

S1169 Mango

Published 2024-11-25 Modified 2024-11-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-11-25

Description

Mango is a first-stage backdoor written in C#/.NET that was used by OilRig during the Juicy Mix campaign. Mango is the successor to Solar and includes additional exfiltration capabilities, the use of native APIs, and added detection evasion code.

Related

Uses · MITRE ATT&CK (13)

  • T1685 Disable or Modify Tools technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1573.001 Symmetric Cryptography sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1204.002 Malicious File sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1033 System Owner/User Discovery technique
  • T1041 Exfiltration Over C2 Channel technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1106 Native API technique

Referenced by MITRE ATT&CK · uses (2)

References