Emissary

Malware & Tools · Emissary

· MalwareS0082 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Emissary is a Trojan that has been used by Lotus Blossom. It shares code with Elise, with both Trojans being part of a malware group referred to as LStudio.(Citation: Lotus Blossom Dec 2015)

Tactic Coverage

discovery (5)stealth (4)privilege escalation (3)command and control (3)persistence (2)execution (1)

Used By (1 groups)

G0030Lotus BlossomDRAGONFISH, Spring Dragon

Techniques (15)

T1007System Service Discovery

discovery

T1016System Network Configuration Discovery

discovery

T1027.001Binary Padding

stealth

T1027.013Encrypted/Encoded File

stealth

T1055.001Dynamic-link Library Injection

stealthprivilege escalation

T1059.003Windows Command Shell

execution

References

https://attack.mitre.org/software/S0082 http://researchcenter.paloaltonetworks.com/2015/12/attack-on-french-diplomat-linked-to-operation-lotus-blossom/