BoomBox

Malware & Tools · BoomBox

· MalwareS0635 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

BoomBox is a downloader responsible for executing next stage components that has been used by APT29 since at least 2021.(Citation: MSTIC Nobelium Toolset May 2021)

Tactic Coverage

stealth (5)discovery (5)command and control (3)execution (1)persistence (1)privilege escalation (1)exfiltration (1)

Used By (1 groups)

G0016APT29IRON RITUAL, IRON HEMLOCK

Techniques (16)

T1027Obfuscated Files or Information

stealth

T1033System Owner/User Discovery

discovery

T1036Masquerading

stealth

T1071.001Web Protocols

command and control

T1082System Information Discovery

discovery

T1083File and Directory Discovery

discovery

T1087.002Domain Account

References

https://attack.mitre.org/software/S0635 https://www.microsoft.com/security/blog/2021/05/28/breaking-down-nobeliums-latest-early-stage-toolset/