KOPILUWAK

Malware & Tools · KOPILUWAK

· MalwareS1075 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

KOPILUWAK is a JavaScript-based reconnaissance tool that has been used for victim profiling and C2 since at least 2017.(Citation: Mandiant Suspected Turla Campaign February 2023)

Tactic Coverage

discovery (6)collection (2)execution (2)exfiltration (1)command and control (1)initial access (1)

Used By (1 groups)

G0010TurlaIRON HUNTER, Group 88

Techniques (13)

T1005Data from Local System

collection

T1016System Network Configuration Discovery

discovery

T1033System Owner/User Discovery

discovery

T1041Exfiltration Over C2 Channel

exfiltration

T1049System Network Connections Discovery

discovery

T1057Process Discovery

discovery

T1059.007JavaScript

References

https://attack.mitre.org/software/S1075 https://www.mandiant.com/resources/blog/turla-galaxy-opportunity