WINDSHIELD

· MalwareS0155 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

—

Description

WINDSHIELD is a signature backdoor used by APT32. (Citation: FireEye APT32 May 2017)

Tactic Coverage

discovery (3)stealth (1)command and control (1)

Used By (1 groups)

Techniques (5)

T1012Query Registry

discovery

T1033System Owner/User Discovery

discovery

T1070.004File Deletion

stealth

T1082System Information Discovery

discovery

T1095Non-Application Layer Protocol

command and control

References