Snip3

Malware & Tools · Snip3

· MalwareS1086 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Snip3 is a sophisticated crypter-as-a-service that has been used since at least 2021 to obfuscate and load numerous strains of malware including AsyncRAT, Revenge RAT, Agent Tesla, and NETWIRE.(Citation: Morphisec Snip3 May 2021)(Citation: Telefonica Snip3 December 2021)

Tactic Coverage

stealth (7)execution (5)discovery (3)command and control (3)initial access (3)privilege escalation (2)persistence (1)

Used By (1 groups)

G1018TA2541

Techniques (20)

T1027Obfuscated Files or Information

stealth

T1027.001Binary Padding

stealth

T1047Windows Management Instrumentation

execution

T1055.012Process Hollowing

stealthprivilege escalation

T1059.001PowerShell

execution

T1059.005Visual Basic

execution

T1082

References

https://attack.mitre.org/software/S1086 https://telefonicatech.com/blog/snip3-investigacion-malware https://blog.morphisec.com/revealing-the-snip3-crypter-a-highly-evasive-rat-loader