TURNEDUP

Malware & Tools · TURNEDUP

· MalwareS0199 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

TURNEDUP is a non-public backdoor. It has been dropped by APT33's StoneDrill malware. (Citation: FireEye APT33 Sept 2017) (Citation: FireEye APT33 Webinar Sept 2017)

Tactic Coverage

privilege escalation (2)stealth (1)execution (1)discovery (1)command and control (1)collection (1)persistence (1)

Used By (1 groups)

G0064APT33HOLMIUM, Elfin

Techniques (6)

T1055.004Asynchronous Procedure Call

stealthprivilege escalation

T1059.003Windows Command Shell

execution

T1082System Information Discovery

discovery

T1105Ingress Tool Transfer

command and control

T1113Screen Capture

collection

T1547.001Registry Run Keys / Startup Folder

persistenceprivilege escalation

References

https://attack.mitre.org/software/S0199 https://www.fireeye.com/blog/threat-research/2017/09/apt33-insights-into-iranian-cyber-espionage.html https://www.brighttalk.com/webcast/10703/275683