StoneDrill

Malware & Tools · StoneDrill

· MalwareS0380 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

StoneDrill is wiper malware discovered in destructive campaigns against both Middle Eastern and European targets in association with APT33.(Citation: FireEye APT33 Sept 2017)(Citation: Kaspersky StoneDrill 2017)

Tactic Coverage

discovery (5)stealth (4)impact (3)execution (2)privilege escalation (1)command and control (1)collection (1)

Used By (1 groups)

G0064APT33HOLMIUM, Elfin

Techniques (15)

T1012Query Registry

discovery

T1027.013Encrypted/Encoded File

stealth

T1047Windows Management Instrumentation

execution

T1055Process Injection

stealthprivilege escalation

T1059.005Visual Basic

execution

T1070.004File Deletion

stealth

T1082

References

https://attack.mitre.org/software/S0380 https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07180722/Report_Shamoon_StoneDrill_final.pdf https://www.fireeye.com/blog/threat-research/2017/09/apt33-insights-into-iranian-cyber-espionage.html