MITRE ATT&CK / Software / S0031

BACKSPACE

ID

S0031

Type

Malware

Associated names

Lecna

Platforms

Windows

Source

attack.mitre.org

MITRE last modified

17 Nov 2024

Techniques used (14)

• T1012 Query Registry
• T1041 Exfiltration Over C2 Channel
• T1057 Process Discovery
• T1059.003 Windows Command Shell
• T1071.001 Web Protocols
• T1082 System Information Discovery
• T1083 File and Directory Discovery
• T1090.001 Internal Proxy
• T1104 Multi-Stage Channels
• T1112 Modify Registry
• T1132.002 Non-Standard Encoding
• T1547.001 Registry Run Keys / Startup Folder
• T1547.009 Shortcut Modification
• T1686 Disable or Modify System Firewall

Groups using it (1)

• G0013 APT30

References

1. FireEye APT30