MITRE ATT&CK / Software / S0672

Zox

ID

S0672

Type

Malware

Associated names

Gresim, ZoxRPC, ZoxPNG

Platforms

Windows

Source

attack.mitre.org

MITRE last modified

11 Apr 2024

Techniques used (9)

• T1001.002 Steganography
• T1005 Data from Local System
• T1021.002 SMB/Windows Admin Shares
• T1027.013 Encrypted/Encoded File
• T1057 Process Discovery
• T1068 Exploitation for Privilege Escalation
• T1083 File and Directory Discovery
• T1105 Ingress Tool Transfer
• T1680 Local Storage Discovery

Groups using it (1)

• G0001 Axiom

References

1. Novetta-Axiom