Malware: Final1stspy

Description

[Final1stspy](https://attack.mitre.org/software/S0355) is a dropper family that has been used to deliver [DOGCALL](https://attack.mitre.org/software/S0213).(Citation: Unit 42 Nokki Oct 2018)

External References

• mitre-attack
• Unit 42 Nokki Oct 2018

Techniques Used by This Malware

• T1027 — Obfuscated Files or Information
• T1057 — Process Discovery
• T1071.001 — Web Protocols
• T1082 — System Information Discovery
• T1140 — Deobfuscate/Decode Files or Information
• T1547.001 — Registry Run Keys / Startup Folder

APT Groups Using This Malware

• APT37