EnvyScout

· MalwareS0634 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

EnvyScout is a dropper that has been used by APT29 since at least 2021.(Citation: MSTIC Nobelium Toolset May 2021)

Tactic Coverage

stealth (7)execution (3)collection (1)discovery (1)credential access (1)initial access (1)

Used By (1 groups)

Techniques (14)

T1005Data from Local System

collection

T1027.006HTML Smuggling

stealth

T1027.013Encrypted/Encoded File

stealth

T1036Masquerading

stealth

T1059.003Windows Command Shell

execution

T1059.007JavaScript

execution

T1082System Information Discovery

References