Attor
December 21, 2023 ยท View on GitHub
| ID | X0049 |
| Type | Spyware |
| Aliases | None |
| Platforms | X0042 |
| Year | 2013 |
| Associated ATT&CK Software | Attor |
Attor
Attor is a Windows-based espionage platform used in targeted attacks since 2013. Attor has a loadable plugin architecture to customize functionality for specific targets. [1]
ATT&CK Techniques
See ATT&CK: Attor - Techniques Used.
Enhanced ATT&CK Techniques
| Name | Use |
|---|---|
| Exfiltration::Automated Exfiltration (E1020) | Attor has a file uploader plugin that automatically exfiltrates collected data and log files to a C2 server [1] |
Indicators of Compromise
SHA1 Hashes
- 47dc997d08d53e55b8450940d9de94e2b5db631e
- 52213cab4954c850a1ac51974a24b878ca88eb59
- 8a6829b8615c5f6661a84ea3af0e15ab28c5840c
- d0528b8777d556809ac64935fa6247164aaabb4f
- f7e30a3fa186361794699d7a4fac6a9b85ccbf40
References
[1] https://www.welivesecurity.com/wp-content/uploads/2019/10/ESET_Attor.pdf