Wiarp

Malware & Tools · Wiarp

· MalwareS0206 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Wiarp is a trojan used by Elderwood to open a backdoor on compromised hosts. (Citation: Symantec Elderwood Sept 2012) (Citation: Symantec Wiarp May 2012)

Tactic Coverage

privilege escalation (2)stealth (1)execution (1)command and control (1)persistence (1)

Used By (1 groups)

G0066ElderwoodElderwood Gang, Beijing Group

Techniques (4)

T1055Process Injection

stealthprivilege escalation

T1059.003Windows Command Shell

execution

T1105Ingress Tool Transfer

command and control

T1543.003Windows Service

persistenceprivilege escalation

References

https://attack.mitre.org/software/S0206 https://web.archive.org/web/20190717233006/http:/www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/the-elderwood-project.pdf https://www.symantec.com/security_response/writeup.jsp?docid=2012-051606-1005-99