Skip to content

Hide Navigation Hide TOC

DDKONG - S0255 (d186c1d6-e3ac-4c3d-a534-9ddfeb8c57bb)

DDKONG is a malware sample that was part of a campaign by Rancor. DDKONG was first seen used in February 2017. (Citation: Rancor Unit42 June 2018)

Cluster A Galaxy A Cluster B Galaxy B Level
Deobfuscate/Decode Files or Information - T1140 (3ccef7ae-cb5e-48f6-8302-897105fbf55c) Attack Pattern DDKONG - S0255 (d186c1d6-e3ac-4c3d-a534-9ddfeb8c57bb) Malware 1
File and Directory Discovery - T1083 (7bc57495-ea59-4380-be31-a64af124ef18) Attack Pattern DDKONG - S0255 (d186c1d6-e3ac-4c3d-a534-9ddfeb8c57bb) Malware 1
Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) Attack Pattern DDKONG - S0255 (d186c1d6-e3ac-4c3d-a534-9ddfeb8c57bb) Malware 1
DDKONG - S0255 (d186c1d6-e3ac-4c3d-a534-9ddfeb8c57bb) Malware Rundll32 - T1218.011 (045d0922-2310-4e60-b5e4-3302302cb3c5) Attack Pattern 1
System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) Attack Pattern Rundll32 - T1218.011 (045d0922-2310-4e60-b5e4-3302302cb3c5) Attack Pattern 2