SOFTWARE
SOFTWARE
A-B
C-D
E-F
G-H
I-J
K-L
M-N
O-P
Q-R
S-T
U-V
W-X
SNUGRIDE
ID: S0159
Type: MALWARE
Platforms: Windows
Version: 1.1
Created: 14 December 2017
Last Modified: 30 March 2020
Techniques Used
Domain | ID | Name | Use | |
---|---|---|---|---|
Enterprise | T1071 | .001 | Application Layer Protocol: Web Protocols | |
Enterprise | T1547 | .001 | Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder |
SNUGRIDE establishes persistence through a Registry Run key.[1] |
Enterprise | T1059 | .003 | Command and Scripting Interpreter: Windows Command Shell |
SNUGRIDE is capable of executing commands and spawning a reverse shell.[1] |
Enterprise | T1573 | .001 | Encrypted Channel: Symmetric Cryptography |
SNUGRIDE encrypts C2 traffic using AES with a static key.[1] |
Groups That Use This Software
ID | Name | References |
---|---|---|
G0045 | menuPass |
References
×