S0172 Reaver

malwareEnterprise

platformsWindows

also known asReaver

Reaver is a malware family that has been in the wild since at least late 2016. Reporting indicates victims have primarily been associated with the "Five Poisons," which are movements the Chinese government considers dangerous. The type of malware is rare due to its final payload being in the form of Control Panel items.

techniques used (14)

ATT&CK techniques this enables or maps to.

T1012Query Registry
T1016System Network Configuration Discovery
T1027.013Encrypted/Encoded File
T1033System Owner/User Discovery
T1070.004File Deletion
T1071.001Web Protocols
T1082System Information Discovery
T1095Non-Application Layer Protocol
T1218.002Control Panel
T1543.003Windows Service
T1547.001Registry Run Keys / Startup Folder
T1547.009Shortcut Modification
T1560.003Archive via Custom Method
T1680Local Storage Discovery

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan