ATT&CKReferencesSecurelist Denis April 2017

Securelist Denis April 2017

Shulmin, A., Yunakovsky, S. (2017, April 28). Use of DNS Tunneling for C&C Communications. Retrieved November 5, 2018.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples4

TechniqueUsed byProcedure example
T1033
System Owner/User Discovery
MalwareDenis

Denis enumerates and collects the username from the victim’s machine.

T1071.004
DNS
MalwareDenis

Denis has used DNS tunneling for C2 communications.

T1082
System Information Discovery
MalwareDenis

Denis collects OS information and the computer name from the victim’s machine.

T1560.002
Archive via Library
MalwareDenis

Denis compressed collected data using zlib.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.