Cannon

Malware & Tools · Cannon

· MalwareS0351 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Cannon is a Trojan with variants written in C# and Delphi. It was first observed in April 2018. (Citation: Unit42 Cannon Nov 2018)(Citation: Unit42 Sofacy Dec 2018)

Tactic Coverage

discovery (6)command and control (2)exfiltration (1)collection (1)persistence (1)privilege escalation (1)

Used By (1 groups)

G0007APT28IRON TWILIGHT, SNAKEMACKEREL

Techniques (11)

T1033System Owner/User Discovery

discovery

T1041Exfiltration Over C2 Channel

exfiltration

T1057Process Discovery

discovery

T1071.003Mail Protocols

command and control

T1082System Information Discovery

discovery

T1083File and Directory Discovery

discovery

T1105Ingress Tool Transfer

References

https://attack.mitre.org/software/S0351 https://researchcenter.paloaltonetworks.com/2018/11/unit42-sofacy-continues-global-attacks-wheels-new-cannon-trojan/https://unit42.paloaltonetworks.com/dear-joohn-sofacy-groups-global-campaign/