ATT&CK ReferencesFireEye EPS Awakens Part 2

FireEye EPS Awakens Part 2

Winters, R. (2015, December 20). The EPS Awakens - Part 2. Retrieved January 22, 2016.

Techniques1

None recorded.

Technique	Used by	Procedure example
T1057 Process Discovery	MalwareELMER	ELMER is capable of performing process listings. FireEye EPS Awakens Part 2
T1071.001 Web Protocols	MalwareELMER	ELMER uses HTTP for command and control. FireEye EPS Awakens Part 2
T1083 File and Directory Discovery	MalwareELMER	ELMER is capable of performing directory listings. FireEye EPS Awakens Part 2
T1584.004 Server	GroupAPT16	APT16 has compromised otherwise legitimate sites as staging servers for second-stage payloads. FireEye EPS Awakens Part 2

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.