ATT&CK ReferencesMcAfee Shamoon December19 2018

McAfee Shamoon December19 2018

Roccia, T., Saavedra-Morales, J., Beek, C.. (2018, December 19). Shamoon Attackers Employ New Tool Kit to Wipe Infected Systems. Retrieved May 29, 2020.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples1

Technique	Used by	Procedure example
T1569.002 Service Execution	MalwareShamoon	Shamoon creates a new service named “ntssrv” to execute the payload. Shamoon can also spread via PsExec. McAfee Shamoon December19 2018 Palo Alto Shamoon Nov 2016

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.