Malware: DealersChoice

Description

[DealersChoice](https://attack.mitre.org/software/S0243) is a Flash exploitation framework used by [APT28](https://attack.mitre.org/groups/G0007). (Citation: Sofacy DealersChoice)

External References

• mitre-attack
• Sofacy DealersChoice

Techniques Used by This Malware

• T1059.003 — Windows Command Shell
• T1071.001 — Web Protocols
• T1203 — Exploitation for Client Execution

APT Groups Using This Malware

• APT28