Pandora
Techniques Used |
||||
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Enterprise | T1071 | .001 | Application Layer Protocol: Web Protocols |
Pandora can communicate over HTTP.(Citation: Trend Micro Iron Tiger April 2021) |
| Enterprise | T1543 | .003 | Create or Modify System Process: Windows Service |
Pandora has the ability to gain system privileges through Windows services.(Citation: Trend Micro Iron Tiger April 2021) |
| Enterprise | T1573 | .001 | Encrypted Channel: Symmetric Cryptography |
Pandora has the ability to encrypt communications with D3DES.(Citation: Trend Micro Iron Tiger April 2021) |
| Enterprise | T1574 | .002 | Hijack Execution Flow: DLL Side-Loading |
Pandora can use DLL side-loading to execute malicious payloads.(Citation: Trend Micro Iron Tiger April 2021) |
| Enterprise | T1553 | .006 | Subvert Trust Controls: Code Signing Policy Modification |
Pandora can use CVE-2017-15303 to disable Windows Driver Signature Enforcement (DSE) protection and load its driver.(Citation: Trend Micro Iron Tiger April 2021) |
| Enterprise | T1569 | .002 | System Services: Service Execution |
Pandora has the ability to install itself as a Windows service.(Citation: Trend Micro Iron Tiger April 2021) |
Groups That Use This Software |
||
| ID | Name | References |
|---|---|---|
| G0027 | Threat Group-3390 |
(Citation: Trend Micro Iron Tiger April 2021) |
Мы используем cookie-файлы, чтобы получить статистику, которая помогает нам улучшить сервис для вас с целью персонализации сервисов и предложений. Вы может прочитать подробнее о cookie-файлах или изменить настройки браузера. Продолжая пользоваться сайтом, вы даёте согласие на использование ваших cookie-файлов и соглашаетесь с Политикой обработки персональных данных.