StarProxy

Malware & Tools · StarProxy

· MalwareS1227 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

StarProxy is custom malware used by Mustang Panda as a post-compromise tool, to enable proxying of traffic between the infected machine and other machines on the same network. (Citation: Zscaler)

Tactic Coverage

command and control (4)execution (3)stealth (2)discovery (1)

Used By (1 groups)

G0129Mustang PandaTA416, RedDelta

Techniques (9)

T1001.003Protocol or Service Impersonation

command and control

T1059Command and Scripting Interpreter

execution

T1090.001Internal Proxy

command and control

T1095Non-Application Layer Protocol

command and control

T1106Native API

execution

T1124System Time Discovery

discovery

T1140

References

https://attack.mitre.org/software/S1227 https://www.zscaler.com/blogs/security-research/latest-mustang-panda-arsenal-toneshell-and-starproxy-p1