FortiGard Labs. (2019, March 12). ReGeorg.HTTP.Tunnel. Retrieved December 3, 2024.
Not cited by any technique.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1021.001 Remote Desktop Protocol |
MalwarereGeorg | reGeorg can be used to tunnel RDP connections. |
| T1021.002 SMB/Windows Admin Shares |
MalwarereGeorg | reGeorg has the ability to tunnel SMB sessions. |
| T1021.004 SSH |
MalwarereGeorg | reGeorg can communicate using SSH through an HTTP tunnel. |
| T1071.001 Web Protocols |
MalwarereGeorg | reGeorg can use HTTP to tunnel connections in and out of targeted networks. |
| T1090 Proxy |
MalwarereGeorg | reGeorg can establish an HTTP or SOCKS proxy to tunnel data in and out of a network. |
| T1095 Non-Application Layer Protocol |
MalwarereGeorg | reGeorg can tunnel TCP sessions into targeted networks. |
| T1572 Protocol Tunneling |
MalwarereGeorg | reGeorg can tunnel TCP sessions including RDP, SSH, and SMB through HTTP. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
