Shark

Malware & Tools · Shark

· MalwareS1019 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Shark is a backdoor malware written in C# and .NET that is an updated version of Milan; it has been used by HEXANE since at least July 2021.(Citation: ClearSky Siamesekitten August 2021)(Citation: Accenture Lyceum Targets November 2021)

Tactic Coverage

command and control (5)stealth (5)discovery (3)collection (2)exfiltration (2)execution (1)

Used By (1 groups)

G1001HEXANELyceum, Siamesekitten

Techniques (17)

T1005Data from Local System

collection

T1008Fallback Channels

command and control

T1012Query Registry

discovery

T1027.013Encrypted/Encoded File

stealth

T1029Scheduled Transfer

exfiltration

T1036.005Match Legitimate Resource Name or Location

stealth

T1041Exfiltration Over C2 Channel

References

https://attack.mitre.org/software/S1019 https://www.accenture.com/us-en/blogs/cyber-defense/iran-based-lyceum-campaigns https://www.clearskysec.com/siamesekitten/