TINYTYPHON

Malware & Tools · TINYTYPHON

· MalwareS0131 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

—

Description

TINYTYPHON is a backdoor that has been used by the actors responsible for the MONSOON campaign. The majority of its code was reportedly taken from the MyDoom worm. (Citation: Forcepoint Monsoon)

Tactic Coverage

exfiltration (1)stealth (1)discovery (1)persistence (1)privilege escalation (1)

Used By (1 groups)

G0040PatchworkHangover Group, Dropping Elephant

Techniques (4)

T1020Automated Exfiltration

exfiltration

T1027.013Encrypted/Encoded File

stealth

T1083File and Directory Discovery

discovery

T1547.001Registry Run Keys / Startup Folder

persistenceprivilege escalation

References

https://attack.mitre.org/software/S0131 https://www.forcepoint.com/sites/default/files/resources/files/forcepoint-security-labs-monsoon-analysis-report.pdf