ATT&CK ReferencesFireEye Regsvr32 Targeting Mongolian Gov

FireEye Regsvr32 Targeting Mongolian Gov

Anubhav, A., Kizhakkinan, D. (2017, February 22). Spear Phishing Techniques Used in Attacks Targeting the Mongolian Government. Retrieved February 24, 2017.

Open the source

Techniques1

T1218.010Regsvr32

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples1

Technique	Used by	Procedure example
T1547.014 Active Setup	MalwarePoisonIvy	PoisonIvy creates a Registry key in the Active Setup pointing to a malicious executable. FireEye Regsvr32 Targeting Mongolian Gov Microsoft PoisonIvy 2017 paloalto Tropic Trooper 2016

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.