Malware: Epic

Description

[Epic](https://attack.mitre.org/software/S0091) is a backdoor that has been used by [Turla](https://attack.mitre.org/groups/G0010). (Citation: Kaspersky Turla)

External References

• mitre-attack
• Kaspersky Turla

Techniques Used by This Malware

• T1007 — System Service Discovery
• T1012 — Query Registry
• T1016 — System Network Configuration Discovery
• T1018 — Remote System Discovery
• T1027 — Obfuscated Files or Information
• T1033 — System Owner/User Discovery
• T1049 — System Network Connections Discovery
• T1055.011 — Extra Window Memory Injection
• T1057 — Process Discovery
• T1069.001 — Local Groups
• T1070.004 — File Deletion
• T1071.001 — Web Protocols
• T1082 — System Information Discovery
• T1083 — File and Directory Discovery
• T1087.001 — Local Account
• T1124 — System Time Discovery
• T1518.001 — Security Software Discovery
• T1553.002 — Code Signing
• T1560 — Archive Collected Data
• T1560.002 — Archive via Library
• T1573.001 — Symmetric Cryptography

APT Groups Using This Malware

• Turla