RogueRobin

Malware & Tools · RogueRobin

· MalwareS0270 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

RogueRobin is a payload used by DarkHydrus that has been developed in PowerShell and C#. (Citation: Unit 42 DarkHydrus July 2018)(Citation: Unit42 DarkHydrus Jan 2019)

Tactic Coverage

discovery (6)stealth (4)execution (3)command and control (3)persistence (2)privilege escalation (2)collection (1)

Used By (1 groups)

G0079DarkHydrus

Techniques (18)

T1016System Network Configuration Discovery

discovery

T1027.010Command Obfuscation

stealth

T1033System Owner/User Discovery

discovery

T1047Windows Management Instrumentation

execution

T1057Process Discovery

discovery

T1059.001PowerShell

execution

T1059.003Windows Command Shell

References

https://attack.mitre.org/software/S0270 https://researchcenter.paloaltonetworks.com/2018/07/unit42-new-threat-actor-group-darkhydrus-targets-middle-east-government/https://unit42.paloaltonetworks.com/darkhydrus-delivers-new-trojan-that-can-use-google-drive-for-c2-communications/