SOFTWARE
SOFTWARE
A-B
C-D
E-F
G-H
I-J
K-L
M-N
O-P
Q-R
S-T
U-V
W-X
OnionDuke
ID: S0052
Type: MALWARE
Platforms: Windows
Version: 1.2
Created: 31 May 2017
Last Modified: 23 September 2020
Techniques Used
Domain | ID | Name | Use | |
---|---|---|---|---|
Enterprise | T1071 | .001 | Application Layer Protocol: Web Protocols | |
Enterprise | T1140 | Deobfuscate/Decode Files or Information |
OnionDuke can use a custom decryption algorithm to decrypt strings.[2] |
|
Enterprise | T1499 | Endpoint Denial of Service |
OnionDuke has the capability to use a Denial of Service module.[2] |
|
Enterprise | T1003 | OS Credential Dumping | ||
Enterprise | T1102 | .003 | Web Service: One-Way Communication |
Groups That Use This Software
ID | Name | References |
---|---|---|
G0016 | APT29 |
References
×