H1N1
- ID
- S0132
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 12 May 2026
H1N1 is a malware variant that has been distributed via a campaign using VBA macros to infect victims. Although it initially had only loader capabilities, it has evolved to include information-stealing functionality. [1]
Techniques used (13)
- T1027 Obfuscated Files or Information
- T1027.002 Software Packing
- T1059.003 Windows Command Shell
- T1080 Taint Shared Content
- T1091 Replication Through Removable Media
- T1105 Ingress Tool Transfer
- T1132 Data Encoding
- T1490 Inhibit System Recovery
- T1548.002 Bypass User Account Control
- T1555.003 Credentials from Web Browsers
- T1573.001 Symmetric Cryptography
- T1685 Disable or Modify Tools
- T1686.003 Windows Host Firewall