Thomas, C. (n.d.). Mythc Documentation. Retrieved March 25, 2022.
Not cited by any technique.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1008 Fallback Channels |
ToolMythic | Mythic can use a list of C2 URLs as fallback mechanisms in case one IP or domain gets blocked. |
| T1030 Data Transfer Size Limits |
ToolMythic | Mythic supports custom chunk sizes used to upload/download files. |
| T1071.001 Web Protocols |
ToolMythic | Mythic supports HTTP-based C2 profiles. |
| T1071.002 File Transfer Protocols |
ToolMythic | Mythic supports SMB-based peer-to-peer C2 profiles. |
| T1071.004 DNS |
ToolMythic | Mythic supports DNS-based C2 profiles. |
| T1090.001 Internal Proxy |
ToolMythic | Mythic can leverage a peer-to-peer C2 profile between agents. |
| T1090.002 External Proxy |
ToolMythic | Mythic can leverage a modified SOCKS5 proxy to tunnel egress C2 traffic. |
| T1090.004 Domain Fronting |
ToolMythic | Mythic supports domain fronting via custom request headers. |
| T1095 Non-Application Layer Protocol |
ToolMythic | Mythic supports WebSocket and TCP-based C2 profiles. |
| T1119 Automated Collection |
ToolMythic | Mythic supports scripting of file downloads from agents. |
| T1132 Data Encoding |
ToolMythic | Mythic provides various transform functions to encode and/or randomize C2 data. |
| T1572 Protocol Tunneling |
ToolMythic | Mythic can use SOCKS proxies to tunnel traffic through another protocol. |
| T1573.002 Asymmetric Cryptography |
ToolMythic | Mythic supports SSL encrypted C2. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
