Briba

Malware & Tools · Briba

· MalwareS0204 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Briba is a trojan used by Elderwood to open a backdoor and download files on to compromised hosts. (Citation: Symantec Elderwood Sept 2012) (Citation: Symantec Briba May 2012)

Tactic Coverage

persistence (2)privilege escalation (2)command and control (1)stealth (1)

Used By (1 groups)

G0066ElderwoodElderwood Gang, Beijing Group

Techniques (4)

T1105Ingress Tool Transfer

command and control

T1218.011Rundll32

stealth

T1543.003Windows Service

persistenceprivilege escalation

T1547.001Registry Run Keys / Startup Folder

persistenceprivilege escalation

References

https://attack.mitre.org/software/S0204 https://www.symantec.com/security_response/writeup.jsp?docid=2012-051515-2843-99 https://web.archive.org/web/20190717233006/http:/www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/the-elderwood-project.pdf