MITRE ATT&CK / Software / S0500

MCMD

ID

S0500

Type

Tool

Platforms

Windows

Source

attack.mitre.org

MITRE last modified

12 May 2026

Techniques used (10)

• T1005 Data from Local System
• T1027 Obfuscated Files or Information
• T1036.005 Match Legitimate Resource Name or Location
• T1053.005 Scheduled Task
• T1059.003 Windows Command Shell
• T1070.009 Clear Persistence
• T1071.001 Web Protocols
• T1105 Ingress Tool Transfer
• T1547.001 Registry Run Keys / Startup Folder
• T1564.003 Hidden Window

Groups using it (1)

• G0035 Dragonfly

References

1. Secureworks MCMD July 2019