SpicyOmelette

Malware & Tools · SpicyOmelette

· MalwareS0646 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

SpicyOmelette is a JavaScript based remote access tool that has been used by Cobalt Group since at least 2018.(Citation: Secureworks GOLD KINGSWOOD September 2018)

Tactic Coverage

discovery (5)execution (2)collection (1)command and control (1)defense impairment (1)initial access (1)

Used By (1 groups)

G0080Cobalt GroupGOLD KINGSWOOD, Cobalt Gang

Techniques (11)

T1005Data from Local System

collection

T1016System Network Configuration Discovery

discovery

T1018Remote System Discovery

discovery

T1059.007JavaScript

execution

T1082System Information Discovery

discovery

T1105Ingress Tool Transfer

command and control

T1204.001Malicious Link

References

https://attack.mitre.org/software/S0646 https://www.secureworks.com/blog/cybercriminals-increasingly-trying-to-ensnare-the-big-financial-fish