Hannotog

· MalwareS1211 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Hannotog is a type of backdoor malware uniquely assoicated with Lotus Blossom operations since at least 2022.(Citation: Symantec Bilbug 2022)

Tactic Coverage

command and control (2)exfiltration (1)execution (1)impact (1)persistence (1)privilege escalation (1)defense impairment (1)

Used By (1 groups)

Techniques (7)

T1020Automated Exfiltration

exfiltration

T1059.003Windows Command Shell

execution

T1105Ingress Tool Transfer

command and control

T1489Service Stop

impact

T1543.003Windows Service

persistenceprivilege escalation

T1571Non-Standard Port

command and control

References