NETEAGLE
- ID
- S0034
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 17 Nov 2024
NETEAGLE is a backdoor developed by APT30 with compile dates as early as 2008. It has two main variants known as “Scout” and “Norton.” [1]
Techniques used (11)
- T1008 Fallback Channels
- T1041 Exfiltration Over C2 Channel
- T1057 Process Discovery
- T1059.003 Windows Command Shell
- T1071 Application Layer Protocol
- T1071.001 Web Protocols
- T1083 File and Directory Discovery
- T1095 Non-Application Layer Protocol
- T1547.001 Registry Run Keys / Startup Folder
- T1568 Dynamic Resolution
- T1573.001 Symmetric Cryptography