DUSTPAN
- ID
- S1158
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 21 Sep 2024
DUSTPAN is an in-memory dropper written in C/C++ used by APT41 since 2021 that decrypts and executes an embedded payload.[1][2]
Techniques used (6)
- T1027.009 Embedded Payloads
- T1027.013 Encrypted/Encoded File
- T1036.005 Match Legitimate Resource Name or Location
- T1055.002 Portable Executable Injection
- T1140 Deobfuscate/Decode Files or Information
- T1543.003 Windows Service