Epic

Malware & Tools · Epic

· MalwareS0091 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Epic is a backdoor that has been used by Turla. (Citation: Kaspersky Turla)

Tactic Coverage

discovery (14)stealth (3)command and control (2)collection (2)privilege escalation (1)defense impairment (1)

Used By (1 groups)

G0010TurlaIRON HUNTER, Group 88

Techniques (22)

T1007System Service Discovery

discovery

T1012Query Registry

discovery

T1016System Network Configuration Discovery

discovery

T1018Remote System Discovery

discovery

T1027Obfuscated Files or Information

stealth

T1033System Owner/User Discovery

discovery

T1049System Network Connections Discovery

References

https://attack.mitre.org/software/S0091 https://securelist.com/the-epic-turla-operation/65545/

T1055.011Extra Window Memory Injection

stealthprivilege escalation

T1057Process Discovery

discovery

T1069.001Local Groups

discovery

T1070.004File Deletion

stealth

T1071.001Web Protocols

command and control

T1082System Information Discovery

discovery

T1083File and Directory Discovery

discovery

T1087.001Local Account

discovery

T1124System Time Discovery

discovery

T1518.001Security Software Discovery

discovery

T1553.002Code Signing

defense impairment

T1560Archive Collected Data

collection

T1560.002Archive via Library

collection

T1573.001Symmetric Cryptography

command and control

T1680Local Storage Discovery

discovery