Malware.View on attack.mitre.org
DealersChoice is a Flash exploitation framework used by APT28.
| Technique | Procedure example |
|---|---|
| T1059.003 Windows Command Shell |
DealersChoice makes modifications to open-source scripts from GitHub and executes them on the victim’s machine. |
| T1071.001 Web Protocols |
DealersChoice uses HTTP for communication with the C2 server. |
| T1203 Exploitation for Client Execution |
DealersChoice leverages vulnerable versions of Flash to perform execution. |
None recorded.
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
