BLUELIGHT

· MalwareS0657 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

BLUELIGHT is a remote access Trojan used by APT37 that was first observed in early 2021.(Citation: Volexity InkySquid BLUELIGHT August 2021)

Tactic Coverage

discovery (8)stealth (3)command and control (3)collection (3)credential access (2)exfiltration (1)

Used By (1 groups)

Techniques (19)

T1016System Network Configuration Discovery

discovery

T1027.013Encrypted/Encoded File

stealth

T1033System Owner/User Discovery

discovery

T1041Exfiltration Over C2 Channel

exfiltration

T1057Process Discovery

discovery

T1070.004File Deletion

stealth

T1071.001Web Protocols

References