| Local Data Staging - T1074.001 (1c34f7aa-9341-4a48-bfab-af22e51aca6c) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Poison Ivy (2abe89de-46dd-4dae-ae22-b49a593aff54) |
Tool |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Symmetric Cryptography - T1573.001 (24bfaeba-cb0d-4525-b3dc-507c77ecec41) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Poison Ivy (7789fc1b-3cbc-4a1c-8ef0-8b06760f93e7) |
Malpedia |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Registry Run Keys / Startup Folder - T1547.001 (9efb1ea7-c37b-4595-9640-b7680cd84279) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
Rootkit - T1014 (0f20e3cb-245b-4a61-8a91-2d93f7cb0e9b) |
Attack Pattern |
1 |
| PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
Keylogging - T1056.001 (09a60ea3-a8d1-4ae5-976e-5783248b72a4) |
Attack Pattern |
1 |
| Windows Service - T1543.003 (2959d63f-73fd-46a1-abd2-109d7dcede32) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Dynamic-link Library Injection - T1055.001 (f4599aa0-4f85-4a32-80ea-fc39dc965945) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Modify Registry - T1112 (57340c81-c025-4189-8fa0-fc7ede51bae4) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| PoisonIvy (4e104fef-8a2c-4679-b497-6e86d7d47db0) |
RAT |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
Active Setup - T1547.014 (22522668-ddf6-470b-a027-9d6866679f67) |
Attack Pattern |
1 |
| Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| poisonivy (e336aeba-b61a-44e0-a0df-cd52a5839db5) |
Tool |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Data from Local System - T1005 (3c4a2599-71ee-4405-ba1e-0e28414b4bc5) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Application Window Discovery - T1010 (4ae4f953-fe58-4cc8-a327-33257e30a830) |
Attack Pattern |
PoisonIvy - S0012 (b42378e0-f147-496f-992a-26a49705395b) |
Malware |
1 |
| Local Data Staging - T1074.001 (1c34f7aa-9341-4a48-bfab-af22e51aca6c) |
Attack Pattern |
Data Staged - T1074 (7dd95ff6-712e-4056-9626-312ea4ab4c5e) |
Attack Pattern |
2 |
| Poison Ivy (2abe89de-46dd-4dae-ae22-b49a593aff54) |
Tool |
Poison Ivy (7789fc1b-3cbc-4a1c-8ef0-8b06760f93e7) |
Malpedia |
2 |
| Poison Ivy (2abe89de-46dd-4dae-ae22-b49a593aff54) |
Tool |
PoisonIvy (4e104fef-8a2c-4679-b497-6e86d7d47db0) |
RAT |
2 |
| APT14 (c82c904f-b3b4-40a2-bf0d-008912953104) |
Threat Actor |
Poison Ivy (2abe89de-46dd-4dae-ae22-b49a593aff54) |
Tool |
2 |
| Poison Ivy (2abe89de-46dd-4dae-ae22-b49a593aff54) |
Tool |
poisonivy (e336aeba-b61a-44e0-a0df-cd52a5839db5) |
Tool |
2 |
| Encrypted Channel - T1573 (b8902400-e6c5-4ba2-95aa-2d35b442b118) |
Attack Pattern |
Symmetric Cryptography - T1573.001 (24bfaeba-cb0d-4525-b3dc-507c77ecec41) |
Attack Pattern |
2 |
| Registry Run Keys / Startup Folder - T1547.001 (9efb1ea7-c37b-4595-9640-b7680cd84279) |
Attack Pattern |
Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) |
Attack Pattern |
2 |
| Input Capture - T1056 (bb5a00de-e086-4859-a231-fa793f6797e2) |
Attack Pattern |
Keylogging - T1056.001 (09a60ea3-a8d1-4ae5-976e-5783248b72a4) |
Attack Pattern |
2 |
| Windows Service - T1543.003 (2959d63f-73fd-46a1-abd2-109d7dcede32) |
Attack Pattern |
Create or Modify System Process - T1543 (106c0cf6-bf73-4601-9aa8-0945c2715ec5) |
Attack Pattern |
2 |
| Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) |
Attack Pattern |
Dynamic-link Library Injection - T1055.001 (f4599aa0-4f85-4a32-80ea-fc39dc965945) |
Attack Pattern |
2 |
| PoisonIvy (4e104fef-8a2c-4679-b497-6e86d7d47db0) |
RAT |
Poison Ivy (7789fc1b-3cbc-4a1c-8ef0-8b06760f93e7) |
Malpedia |
2 |
| APT14 (c82c904f-b3b4-40a2-bf0d-008912953104) |
Threat Actor |
PoisonIvy (4e104fef-8a2c-4679-b497-6e86d7d47db0) |
RAT |
2 |
| poisonivy (e336aeba-b61a-44e0-a0df-cd52a5839db5) |
Tool |
PoisonIvy (4e104fef-8a2c-4679-b497-6e86d7d47db0) |
RAT |
2 |
| Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) |
Attack Pattern |
Active Setup - T1547.014 (22522668-ddf6-470b-a027-9d6866679f67) |
Attack Pattern |
2 |
| poisonivy (e336aeba-b61a-44e0-a0df-cd52a5839db5) |
Tool |
Poison Ivy (7789fc1b-3cbc-4a1c-8ef0-8b06760f93e7) |
Malpedia |
2 |
| Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62) |
Attack Pattern |
Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) |
Attack Pattern |
2 |
| APT14 (c82c904f-b3b4-40a2-bf0d-008912953104) |
Threat Actor |
Torn RAT (32a67552-3b31-47bb-8098-078099bbc813) |
Tool |
3 |
| APT14 (c82c904f-b3b4-40a2-bf0d-008912953104) |
Threat Actor |
Gh0st Rat (cb8c8253-4024-4cc9-8989-b4a5f95f6c2f) |
Tool |
3 |
| APT14 (c82c904f-b3b4-40a2-bf0d-008912953104) |
Threat Actor |
Gh0st RAT (255a59a7-db2d-44fc-9ca9-5859b65817c3) |
RAT |
3 |
| Gh0st Rat (cb8c8253-4024-4cc9-8989-b4a5f95f6c2f) |
Tool |
APT43 (aac49b4e-74e9-49fa-84f9-e340cf8bafbc) |
Threat Actor |
4 |
| Gh0st RAT (255a59a7-db2d-44fc-9ca9-5859b65817c3) |
RAT |
Ghost RAT (225fa6cf-dc9c-4b86-873b-cdf1d9dd3738) |
Malpedia |
4 |