MITRE ATT&CK / Software / S0337

BadPatch

ID

S0337

Type

Malware

Platforms

Windows

Source

attack.mitre.org

MITRE last modified

25 Apr 2025

Techniques used (12)

• T1005 Data from Local System
• T1056.001 Keylogging
• T1071.001 Web Protocols
• T1071.003 Mail Protocols
• T1074.001 Local Data Staging
• T1082 System Information Discovery
• T1083 File and Directory Discovery
• T1105 Ingress Tool Transfer
• T1113 Screen Capture
• T1497.001 System Checks
• T1518.001 Security Software Discovery
• T1547.001 Registry Run Keys / Startup Folder

References

1. Unit 42 BadPatch Oct 2017