ATT&CKReferencesMicrosoft KnuckleTouch 2024

Microsoft KnuckleTouch 2024

Microsoft. (2024, February 14). Backdoor:Win64/KnuckleTouch.A!dha. Retrieved January 6, 2025.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software1

Campaigns0

None recorded.

Procedure examples3

TechniqueUsed byProcedure example
T1036.008
Masquerade File Type
MalwareKapeka

Kapeka masquerades as a Microsoft Word Add-In file, with the extension `.wll`, but is a malicious DLL file.

T1053.005
Scheduled Task
MalwareKapeka

Kapeka persists via scheduled tasks.

T1218.011
Rundll32
MalwareKapeka

Kapeka is a Windows DLL file executed via ordinal by `rundll32.exe`.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.