S0082 Emissary

malwareEnterprise

platformsWindows

also known asEmissary

Emissary is a Trojan that has been used by Lotus Blossom. It shares code with Elise, with both Trojans being part of a malware group referred to as LStudio.

techniques used (15)

ATT&CK techniques this enables or maps to.

T1007System Service Discovery
T1016System Network Configuration Discovery
T1027.001Binary Padding
T1027.013Encrypted/Encoded File
T1055.001Dynamic-link Library Injection
T1059.003Windows Command Shell
T1069.001Local Groups
T1071.001Web Protocols
T1082System Information Discovery
T1105Ingress Tool Transfer
T1218.011Rundll32
T1543.003Windows Service
T1547.001Registry Run Keys / Startup Folder
T1573.001Symmetric Cryptography
T1615Group Policy Discovery

used by groups (1)

Threat groups associated with this.

G0030Lotus Blossom

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan