S0051 MiniDuke

malwareEnterprise

platformsWindows

also known asMiniDuke

MiniDuke is malware that was used by APT29 from 2010 to 2015. The MiniDuke toolset consists of multiple downloader and backdoor components. The loader has been used with other MiniDuke components as well as in conjunction with CosmicDuke and PinchDuke.

techniques used (9)

ATT&CK techniques this enables or maps to.

T1008Fallback Channels
T1027Obfuscated Files or Information
T1071.001Web Protocols
T1082System Information Discovery
T1083File and Directory Discovery
T1090.001Internal Proxy
T1102.001Dead Drop Resolver
T1105Ingress Tool Transfer
T1568.002Domain Generation Algorithms

used by groups (1)

Threat groups associated with this.

G0016APT29

used by campaigns (1)

Campaigns that use this.

C0023Operation Ghost

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan