HOMEFRY

Malware & Tools · HOMEFRY

· MalwareS0232 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

HOMEFRY is a 64-bit Windows password dumper/cracker that has previously been used in conjunction with other Leviathan backdoors. (Citation: FireEye Periscope March 2018)

Tactic Coverage

credential access (1)stealth (1)execution (1)

Used By (1 groups)

G0065LeviathanMUDCARP, Kryptonite Panda

Techniques (3)

T1003OS Credential Dumping

credential access

T1027.013Encrypted/Encoded File

stealth

T1059.003Windows Command Shell

execution

References

https://attack.mitre.org/software/S0232 https://www.fireeye.com/blog/threat-research/2018/03/suspected-chinese-espionage-group-targeting-maritime-and-engineering-industries.html