GRIFFON

· MalwareS0417 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

GRIFFON is a JavaScript backdoor used by FIN7. (Citation: SecureList Griffon May 2019)

Tactic Coverage

execution (3)discovery (3)persistence (2)privilege escalation (2)collection (1)

Used By (1 groups)

Techniques (8)

T1053.005Scheduled Task

executionpersistence

T1059.001PowerShell

execution

T1059.007JavaScript

execution

T1069.002Domain Groups

discovery

T1082System Information Discovery

discovery

T1113Screen Capture

collection

T1124

References