THINCRUST

· MalwareS1223 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Network Devices

Description

THINCRUST is a Python-based backdoor tool that has been used by UNC3886 since at least 2023.(Citation: Mandiant Fortinet Zero Day)

Tactic Coverage

command and control (2)execution (1)stealth (1)defense impairment (1)

Used By (1 groups)

Techniques (5)

T1059.006Python

execution

T1071.001Web Protocols

command and control

T1140Deobfuscate/Decode Files or Information

stealth

T1573.001Symmetric Cryptography

command and control

T1686Disable or Modify System Firewall

defense impairment

References