Ecipekac

Malware & Tools · Ecipekac

· MalwareS0624 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Ecipekac is a multi-layer loader that has been used by menuPass since at least 2019 including use as a loader for P8RAT, SodaMaster, and FYAnti.(Citation: Securelist APT10 March 2021)

Tactic Coverage

stealth (3)command and control (1)defense impairment (1)execution (1)

Used By (1 groups)

G0045menuPassCicada, POTASSIUM

Techniques (5)

T1027Obfuscated Files or Information

stealth

T1105Ingress Tool Transfer

command and control

T1140Deobfuscate/Decode Files or Information

stealth

T1553.002Code Signing

defense impairment

T1574.001DLL

stealthexecution

References

https://attack.mitre.org/software/S0624 https://securelist.com/apt10-sophisticated-multi-layered-loader-ecipekac-discovered-in-a41apt-campaign/101519/