BS2005

S0014

About this malware

BS2005 is malware that was used by Ke3chang in spearphishing campaigns since at least 2011.

Technique	Procedure example
T1132.001 Standard Encoding	BS2005 uses Base64 encoding for communication in the message body of an HTTP request. Mandiant Operation Ke3chang November 2014

None recorded.

None recorded.

Mandiant Operation Ke3chang November 2014 Open source
Villeneuve, N., Bennett, J. T., Moran, N., Haq, T., Scott, M., & Geers, K. (2014). OPERATION “KE3CHANG”: Targeted Attacks Against Ministries of Foreign Affairs. Retrieved November 12, 2014.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.