AuTo Stealer

Malware & Tools · AuTo Stealer

· MalwareS1029 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

AuTo Stealer is malware written in C++ has been used by SideCopy since at least December 2021 to target government agencies and personnel in India and Afghanistan.(Citation: MalwareBytes SideCopy Dec 2021)

Tactic Coverage

discovery (3)collection (2)command and control (2)exfiltration (1)execution (1)persistence (1)privilege escalation (1)

Used By (1 groups)

G1008SideCopy

Techniques (10)

T1005Data from Local System

collection

T1033System Owner/User Discovery

discovery

T1041Exfiltration Over C2 Channel

exfiltration

T1059.003Windows Command Shell

execution

T1071.001Web Protocols

command and control

T1074.001Local Data Staging

collection

T1082System Information Discovery

References

https://attack.mitre.org/software/S1029 https://www.malwarebytes.com/blog/news/2021/12/sidecopy-apt-connecting-lures-to-victims-payloads-to-infrastructure