S1015Windows

S1015Milan

Platforms
1
ATT&CK
14.1
References
4

Description

[Milan](https://attack.mitre.org/software/S1015) is a backdoor implant based on [DanBot](https://attack.mitre.org/software/S1014) that was written in Visual C++ and .NET. [Milan](https://attack.mitre.org/software/S1015) has been used by [HEXANE](https://attack.mitre.org/groups/G1001) since at least June 2020.(Citation: ClearSky Siamesekitten August 2021)(Citation: Kaspersky Lyceum October 2021)

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S1015
  2. https://www.accenture.com/us-en/blogs/cyber-defense/iran-based-lyceum-campaigns
  3. https://www.clearskysec.com/siamesekitten/
  4. https://vblocalhost.com/uploads/VB2021-Kayal-etal.pdf

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
Shark
Software
DanBot
Software
Kevin
Software
Sardonic
Software
MacMa
Software
DnsSystem
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.