ATT&CK ReferencesMicrosoft PoisonIvy 2017

Microsoft PoisonIvy 2017

McCormack, M. (2017, September 15). Backdoor:Win32/Poisonivy.E. Retrieved December 21, 2020.

Techniques0

Not cited by any technique.

None recorded.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1547.014 Active Setup	MalwarePoisonIvy	PoisonIvy creates a Registry key in the Active Setup pointing to a malicious executable. FireEye Regsvr32 Targeting Mongolian Gov Microsoft PoisonIvy 2017 paloalto Tropic Trooper 2016

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.