MITRE ATT&CK / Software / S0168

Gazer

ID

S0168

Type

Malware

Associated names

WhiteBear

Platforms

Windows

Source

attack.mitre.org

MITRE last modified

11 Apr 2024

Techniques used (18)

• T1027.013 Encrypted/Encoded File
• T1033 System Owner/User Discovery
• T1053.005 Scheduled Task
• T1055 Process Injection
• T1055.003 Thread Execution Hijacking
• T1070.004 File Deletion
• T1070.006 Timestomp
• T1071.001 Web Protocols
• T1105 Ingress Tool Transfer
• T1480.002 Mutual Exclusion
• T1546.002 Screensaver
• T1547.001 Registry Run Keys / Startup Folder
• T1547.004 Winlogon Helper DLL
• T1547.009 Shortcut Modification
• T1553.002 Code Signing
• T1564.004 NTFS File Attributes
• T1573.001 Symmetric Cryptography
• T1573.002 Asymmetric Cryptography

Groups using it (1)

• G0010 Turla

References

1. ESET Gazer Aug 2017