Kaspersky Lab's Global Research and Analysis Team. (2015, February). Equation Group: Questions and Answers. Retrieved December 21, 2015.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1120 Peripheral Device Discovery |
GroupEquation | Equation has used tools with the functionality to search for specific information about the attached hard drive that could be used to identify and overwrite the firmware. |
| T1480.001 Environmental Keying |
GroupEquation | Equation has been observed utilizing environmental keying in payload delivery. |
| T1542.002 Component Firmware |
GroupEquation | Equation is known to have the capability to overwrite the firmware on hard drives from some manufacturers. |
| T1564.005 Hidden File System |
GroupEquation | Equation has used an encrypted virtual file system stored in the Windows Registry. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
