S1021Windows

S1021DnsSystem

Platforms
1
ATT&CK
14.1
References
2

Description

[DnsSystem](https://attack.mitre.org/software/S1021) is a .NET based DNS backdoor, which is a customized version of the open source tool DIG.net, that has been used by [HEXANE](https://attack.mitre.org/groups/G1001) since at least June 2022.(Citation: Zscaler Lyceum DnsSystem June 2022) Documented platforms: Windows. Attributed to ATT&CK group: HEXANE. Catalogued in ATT&CK 14.1. 2 references curated.

Platforms· 1

Windows

Attributed to1

TypeTargetConfidenceTier
GroupHEXANEg1001100%live

References

  1. https://attack.mitre.org/software/S1021
  2. https://www.zscaler.com/blogs/security-research/lyceum-net-dns-backdoor

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
Sys10
Software
Kevin
Software
Milan
Software
Shark
Software
QUIETCANARY
Software
DanBot
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.