MITRE ATT&CK / Software / S0391

HAWKBALL

ID

S0391

Type

Malware

Platforms

Windows

Source

attack.mitre.org

MITRE last modified

11 Apr 2024

Techniques used (11)

• T1027.013 Encrypted/Encoded File
• T1033 System Owner/User Discovery
• T1041 Exfiltration Over C2 Channel
• T1059.003 Windows Command Shell
• T1070.004 File Deletion
• T1071.001 Web Protocols
• T1082 System Information Discovery
• T1106 Native API
• T1203 Exploitation for Client Execution
• T1559.002 Dynamic Data Exchange
• T1560.003 Archive via Custom Method

References

1. FireEye HAWKBALL Jun 2019