MITRE ATT&CKsoftware (malware)

S1171 OilCheck

Published 2024-11-26 Modified 2024-11-27 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-11-26

Description

OilCheck is a C#/.NET downloader that has been used by OilRig since at least 2022 including against targets in Israel. OilCheck uses draft messages created in a shared email account for C2 communication.

Related

Uses · MITRE ATT&CK (3)

  • T1102.002 Bidirectional Communication sub-technique
  • T1567 Exfiltration Over Web Service technique
  • T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

References