ATT&CK ReferencesSCILabs Malteiro Threat Overlap 2023

SCILabs Malteiro Threat Overlap 2023

SCILabs. (2023, October 8). URSA/Mispadu: Overlap analysis with other threats. Retrieved March 13, 2024.

Techniques0

Not cited by any technique.

None recorded.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1027.013 Encrypted/Encoded File	GroupMalteiro	Malteiro has used scripts encoded in Base64 certificates to distribute malware to victims. SCILabs Malteiro Threat Overlap 2023
T1027.013 Encrypted/Encoded File	MalwareMispadu	Mispadu uses a custom algorithm to obfuscate its internal strings and uses hardcoded keys. Mispadu also uses encoded configuration files and has encoded payloads using Base64. ESET Security Mispadu Facebook Ads 2019 SCILabs Malteiro 2021 SCILabs Malteiro Threat Overlap 2023

Technique

Used by

Procedure example

T1027.013
Encrypted/Encoded File

Malteiro has used scripts encoded in Base64 certificates to distribute malware to victims.

T1027.013
Encrypted/Encoded File

Mispadu uses a custom algorithm to obfuscate its internal strings and uses hardcoded keys.

Mispadu also uses encoded configuration files and has encoded payloads using Base64.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.