DanBot

· MalwareS1014 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

DanBot is a first-stage remote access Trojan written in C# that has been used by HEXANE since at least 2018.(Citation: SecureWorks August 2019)

Tactic Coverage

stealth (4)execution (4)command and control (3)collection (1)lateral movement (1)persistence (1)privilege escalation (1)initial access (1)

Used By (1 groups)

Techniques (14)

T1005Data from Local System

collection

T1021.005VNC

lateral movement

T1027.013Encrypted/Encoded File

stealth

T1036.005Match Legitimate Resource Name or Location

stealth

T1053.005Scheduled Task

executionpersistence

T1059.003Windows Command Shell

execution

References