ID | X0049 |
Type | Spyware |
Aliases | None |
Platforms | X0042 |
Year | 2013 |
Associated ATT&CK Software | Attor |
Attor is a Windows-based espionage platform used in targeted attacks since 2013. Attor has a loadable plugin architecture to customize functionality for specific targets. [1]
See ATT&CK: Attor - Techniques Used.
Name | Use |
---|---|
Exfiltration::Automated Exfiltration (E1020) | Attor has a file uploader plugin that automatically exfiltrates collected data and log files to a C2 server [1] |
SHA1 Hashes
- 47dc997d08d53e55b8450940d9de94e2b5db631e
- 52213cab4954c850a1ac51974a24b878ca88eb59
- 8a6829b8615c5f6661a84ea3af0e15ab28c5840c
- d0528b8777d556809ac64935fa6247164aaabb4f
- f7e30a3fa186361794699d7a4fac6a9b85ccbf40
[1] https://www.welivesecurity.com/wp-content/uploads/2019/10/ESET_Attor.pdf