Denis

Malware & Tools · Denis

· MalwareS0354 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Denis is a Windows backdoor and Trojan used by APT32. Denis shares several similarities to the SOUNDBITE backdoor and has been used in conjunction with the Goopy backdoor.(Citation: Cybereason Oceanlotus May 2017)

Tactic Coverage

stealth (8)discovery (6)execution (5)command and control (3)privilege escalation (1)collection (1)

Used By (1 groups)

G0050APT32SeaLotus, OceanLotus

Techniques (20)

T1012Query Registry

discovery

T1016System Network Configuration Discovery

discovery

T1027Obfuscated Files or Information

stealth

T1027.010Command Obfuscation

stealth

T1033System Owner/User Discovery

discovery

T1055.012Process Hollowing

stealthprivilege escalation

References

https://attack.mitre.org/software/S0354 https://www.cybereason.com/blog/operation-cobalt-kitty-apt