Skip to content

Hide Navigation Hide TOC

Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61)

Mis-Type is a backdoor hybrid that was used in Operation Dust Storm by 2012.(Citation: Cylance Dust Storm)

Cluster A Galaxy A Cluster B Galaxy B Level
System Information Discovery - T1082 (354a7f88-63fb-41b5-a801-ce3b377b36f1) Attack Pattern Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware 1
Local Account - T1087.001 (25659dd6-ea12-45c4-97e6-381e3e4b593e) Attack Pattern Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware 1
Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware Local Data Staging - T1074.001 (1c34f7aa-9341-4a48-bfab-af22e51aca6c) Attack Pattern 1
System Network Configuration Discovery - T1016 (707399d6-ab3e-4963-9315-d9d3818cd6a0) Attack Pattern Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware 1
Fallback Channels - T1008 (f24faf46-3b26-4dbb-98f2-63460498e433) Attack Pattern Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware 1
Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware Exfiltration Over C2 Channel - T1041 (92d7da27-2d91-488e-a00c-059dc162766d) Attack Pattern 1
Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware Non-Application Layer Protocol - T1095 (c21d5a77-d422-4a69-acd7-2c53c1faa34b) Attack Pattern 1
Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) Attack Pattern 1
Standard Encoding - T1132.001 (04fd5427-79c7-44ea-ae13-11b24778ff1c) Attack Pattern Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware 1
Native API - T1106 (391d824f-0ef1-47a0-b0ee-c59a75e27670) Attack Pattern Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware 1
Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) Attack Pattern Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware 1
Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware Match Legitimate Name or Location - T1036.005 (1c4e5d32-1fe9-4116-9d9d-59e3925bd6a2) Attack Pattern 1
Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) Attack Pattern 1
Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware Web Protocols - T1071.001 (df8b2a25-8bdf-4856-953c-a04372b1c161) Attack Pattern 1
Data from Local System - T1005 (3c4a2599-71ee-4405-ba1e-0e28414b4bc5) Attack Pattern Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware 1
Local Account - T1136.001 (635cbe30-392d-4e27-978e-66774357c762) Attack Pattern Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware 1
Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware System Owner/User Discovery - T1033 (03d7999c-1f4c-42cc-8373-e7690d318104) Attack Pattern 1
Mis-Type - S0084 (e1161124-f22e-487f-9d5f-ed8efc8dcd61) Malware Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62) Attack Pattern 1
Local Account - T1087.001 (25659dd6-ea12-45c4-97e6-381e3e4b593e) Attack Pattern Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) Attack Pattern 2
Local Data Staging - T1074.001 (1c34f7aa-9341-4a48-bfab-af22e51aca6c) Attack Pattern Data Staged - T1074 (7dd95ff6-712e-4056-9626-312ea4ab4c5e) Attack Pattern 2
Standard Encoding - T1132.001 (04fd5427-79c7-44ea-ae13-11b24778ff1c) Attack Pattern Data Encoding - T1132 (cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f) Attack Pattern 2
Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0) Attack Pattern Match Legitimate Name or Location - T1036.005 (1c4e5d32-1fe9-4116-9d9d-59e3925bd6a2) Attack Pattern 2
Application Layer Protocol - T1071 (355be19c-ffc9-46d5-8d50-d6a036c675b6) Attack Pattern Web Protocols - T1071.001 (df8b2a25-8bdf-4856-953c-a04372b1c161) Attack Pattern 2
Local Account - T1136.001 (635cbe30-392d-4e27-978e-66774357c762) Attack Pattern Create Account - T1136 (e01be9c5-e763-4caf-aeb7-000b416aef67) Attack Pattern 2
Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62) Attack Pattern Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) Attack Pattern 2