News
All
Vulnerability
Incident
Advisory
AI
This week
Today
Ransomware
Australia
New Zealand
Japan
CVE intelligence
All
KEV
Recent
ATT&CK
Mind map
Techniques
Groups
Software
Mitigations
Guides
All
SSH keys
SSH login
TLS certificates
Certificate signing request
Multi-factor authentication
Secrets
Patching
Backups
Least privilege
Firewalls
Logging
Email authentication
Disk encryption
Offboarding
Vendor access
Password-protected zip
Active Directory
Linux commands
Windows commands
macOS commands
Playbooks
All
Essential Eight (legacy)
ASD Essentials
ISM / NIST CSF map
IR first hour
Tools
All
Hash
Encode
CIDR
Timestamp
Defang
URLs
IOC
Diff
Ports
Permissions
Glossary
All
IR
ACSC glossary
AU compliance
Cloud
Concepts
Crypto
Detection
DNS
Frameworks
Hardening
Identity
Logging
Malware
Network
Practitioner
Privacy
Threat intel
Vulnerability
About
MITRE ATT&CK
/
Software
/ S0212
CORALDECK
ID
S0212
Type
Malware
Platforms
Windows
Source
attack.mitre.org
MITRE last modified
17 Nov 2024
CORALDECK
is an exfiltration tool used by
APT37
.
[1]
Techniques used
(3)
T1048.003
Exfiltration Over Unencrypted Non-C2 Protocol
T1083
File and Directory Discovery
T1560.001
Archive via Utility
Groups using it
(1)
G0067
APT37
References
FireEye APT37 Feb 2018
