Unknown Logger

Malware & Tools · Unknown Logger

· MalwareS0130 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Unknown Logger is a publicly released, free backdoor. Version 1.5 of the backdoor has been used by the actors responsible for the MONSOON campaign. (Citation: Forcepoint Monsoon)

Tactic Coverage

discovery (3)credential access (2)collection (1)lateral movement (1)initial access (1)command and control (1)defense impairment (1)

Used By (1 groups)

G0040PatchworkHangover Group, Dropping Elephant

Techniques (8)

T1016System Network Configuration Discovery

discovery

T1033System Owner/User Discovery

discovery

T1056.001Keylogging

collectioncredential access

T1082System Information Discovery

discovery

T1091Replication Through Removable Media

lateral movementinitial access

T1105Ingress Tool Transfer

command and control

References

https://attack.mitre.org/software/S0130 https://www.forcepoint.com/sites/default/files/resources/files/forcepoint-security-labs-monsoon-analysis-report.pdf