Mosquito

Malware & Tools · Mosquito

· MalwareS0256 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Mosquito is a Win32 backdoor that has been used by Turla. Mosquito is made up of three parts: the installer, the launcher, and the backdoor. The main backdoor is called CommanderDLL and is launched by the loader program. (Citation: ESET Turla Mosquito Jan 2018)

Tactic Coverage

discovery (4)stealth (4)execution (4)persistence (3)command and control (2)privilege escalation (2)defense impairment (1)

Used By (1 groups)

G0010TurlaIRON HUNTER, Group 88

Techniques (17)

T1016System Network Configuration Discovery

discovery

T1027.011Fileless Storage

stealth

T1027.013Encrypted/Encoded File

stealth

T1033System Owner/User Discovery

discovery

T1047Windows Management Instrumentation

execution

T1057Process Discovery

discovery

T1059.001PowerShell

References

https://attack.mitre.org/software/S0256 https://www.welivesecurity.com/wp-content/uploads/2018/01/ESET_Turla_Mosquito.pdf