ATT&CK ReferencesMcAfee APT28 DDE1 Nov 2017

McAfee APT28 DDE1 Nov 2017

Sherstobitoff, R., Rea, M. (2017, November 7). Threat Group APT28 Slips Office Malware into Doc Citing NYC Terror Attack. Retrieved November 21, 2017.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples2

Technique	Used by	Procedure example
T1559.002 Dynamic Data Exchange	GroupAPT28	APT28 has delivered JHUHUGIT and Koadic by executing PowerShell commands through DDE in Word documents. McAfee APT28 DDE1 Nov 2017 McAfee APT28 DDE2 Nov 2017 Palo Alto Sofacy 06-2018
T1564.003 Hidden Window	GroupAPT28	APT28 has used the WindowStyle parameter to conceal PowerShell windows. McAfee APT28 DDE1 Nov 2017 Palo Alto Sofacy 06-2018

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.