TinyTurla

Malware & Tools · TinyTurla

· MalwareS0668 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

TinyTurla is a backdoor that has been used by Turla against targets in the US, Germany, and Afghanistan since at least 2020.(Citation: Talos TinyTurla September 2021)

Tactic Coverage

command and control (4)stealth (3)execution (3)collection (1)discovery (1)exfiltration (1)defense impairment (1)persistence (1)

Used By (1 groups)

G0010TurlaIRON HUNTER, Group 88

Techniques (14)

T1005Data from Local System

collection

T1008Fallback Channels

command and control

T1012Query Registry

discovery

T1027.011Fileless Storage

stealth

T1029Scheduled Transfer

exfiltration

T1036.004Masquerade Task or Service

stealth

T1036.005Match Legitimate Resource Name or Location

References

https://attack.mitre.org/software/S0668 https://blog.talosintelligence.com/2021/09/tinyturla.html