Downdelph

Malware & Tools · Downdelph

· MalwareS0134 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Downdelph is a first-stage downloader written in Delphi that has been used by APT28 in rare instances between 2013 and 2015. (Citation: ESET Sednit Part 3)

Tactic Coverage

command and control (3)privilege escalation (1)stealth (1)execution (1)

Used By (1 groups)

G0007APT28IRON TWILIGHT, SNAKEMACKEREL

Techniques (5)

T1001.001Junk Data

command and control

T1105Ingress Tool Transfer

command and control

T1548.002Bypass User Account Control

privilege escalation

T1573.001Symmetric Cryptography

command and control

T1574.001DLL

stealthexecution

References

https://attack.mitre.org/software/S0134 http://www.welivesecurity.com/wp-content/uploads/2016/10/eset-sednit-part3.pdf