ATT&CKReferencesCrysys Skywiper

Crysys Skywiper

sKyWIper Analysis Team. (2012, May 31). sKyWIper (a.k.a. Flame a.k.a. Flamer): A complex malware for targeted attacks. Retrieved September 6, 2018.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples2

TechniqueUsed byProcedure example
T1218.011
Rundll32
MalwareFlame

Rundll32.exe is used as a way of executing Flame at the command-line.

T1547.002
Authentication Package
MalwareFlame

Flame can use Windows Authentication Packages for persistence.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.