ZeroT

· MalwareS0230 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

ZeroT is a Trojan used by TA459, often in conjunction with PlugX. (Citation: Proofpoint TA459 April 2017) (Citation: Proofpoint ZeroT Feb 2017)

Tactic Coverage

stealth (5)command and control (4)discovery (2)privilege escalation (2)persistence (1)execution (1)

Used By (1 groups)

Techniques (13)

T1001.002Steganography

command and control

T1016System Network Configuration Discovery

discovery

T1027.002Software Packing

stealth

T1027.013Encrypted/Encoded File

stealth

T1027.016Junk Code Insertion

stealth

T1071.001Web Protocols

command and control

T1082System Information Discovery

References