Prikormka, Software S0113
Excerpt
Prikormka, Software S0113 | MITRE ATT&CK®
Enterprise T1560 Archive Collected Data
After collecting documents from removable media, Prikormka compresses the collected files, and encrypts it with Blowfish.[1]
Enterprise T1555 Credentials from Password Stores
A module in Prikormka collects passwords stored in applications installed on the victim.[1] .003 Credentials from Web Browsers
A module in Prikormka gathers logins and passwords stored in applications on the victims, including Google Chrome, Mozilla Firefox, and several other browsers.[1]
Enterprise T1132 .001 Data Encodin…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by MITRE ATT&CK on attack.mitre.org.
Mentioned in the excerpt
More from MITRE ATT&CK43
- techdoc_lite-deliverables-numbered option.dotxMITRE ATT&CK · Added 16 Jun
- Cross-Platform Detection of Data Transfer to Cloud Account, Detection Strategy DET0573MITRE ATT&CK · Added 6 Apr
- Encrypted Channel, Technique T1573 - EnterpriseMITRE ATT&CK · Added 6 Apr
- Boot or Logon Autostart Execution: Time Providers, Sub-technique T1547.003 - EnterpriseMITRE ATT&CK · Added 6 Apr
