Shark
- ID
- S1019
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 11 Apr 2024
Shark is a backdoor malware written in C# and .NET that is an updated version of Milan; it has been used by HEXANE since at least July 2021.[1][2]
Techniques used (17)
- T1005 Data from Local System
- T1008 Fallback Channels
- T1012 Query Registry
- T1027.013 Encrypted/Encoded File
- T1029 Scheduled Transfer
- T1036.005 Match Legitimate Resource Name or Location
- T1041 Exfiltration Over C2 Channel
- T1059.003 Windows Command Shell
- T1070.004 File Deletion
- T1071.001 Web Protocols
- T1071.004 DNS
- T1074 Data Staged
- T1082 System Information Discovery
- T1105 Ingress Tool Transfer
- T1140 Deobfuscate/Decode Files or Information
- T1497.001 System Checks
- T1568.002 Domain Generation Algorithms