MITRE ATT&CKsoftware (malware)

S1170 ODAgent

Published 2024-11-26 Modified 2024-11-27 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-11-26

Description

ODAgent is a C#/.NET downloader that has been used by OilRig since at least 2022 including against target organizations in Israel to download and execute payloads and to exfiltrate staged files.

Related

Uses · MITRE ATT&CK (9)

  • T1102.002 Bidirectional Communication sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1567.002 Exfiltration to Cloud Storage sub-technique
  • T1070.004 File Deletion sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1041 Exfiltration Over C2 Channel technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique

Referenced by MITRE ATT&CK · uses (1)

References