AuditCred

· MalwareS0347 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

AuditCred is a malicious DLL that has been used by Lazarus Group during their 2018 attacks.(Citation: TrendMicro Lazarus Nov 2018)

Tactic Coverage

stealth (4)privilege escalation (2)command and control (2)execution (1)discovery (1)persistence (1)

Used By (1 groups)

Techniques (9)

T1027.013Encrypted/Encoded File

stealth

T1055Process Injection

stealthprivilege escalation

T1059.003Windows Command Shell

execution

T1070.004File Deletion

stealth

T1083File and Directory Discovery

discovery

T1090Proxy

command and control

References