Malware: Get2

Description

[Get2](https://attack.mitre.org/software/S0460) is a downloader written in C++ that has been used by [TA505](https://attack.mitre.org/groups/G0092) to deliver [FlawedGrace](https://attack.mitre.org/software/S0383), [FlawedAmmyy](https://attack.mitre.org/software/S0381), Snatch and [SDBbot](https://attack.mitre.org/software/S0461).(Citation: Proofpoint TA505 October 2019)

External References

• mitre-attack
• Proofpoint TA505 October 2019

Techniques Used by This Malware

• T1033 — System Owner/User Discovery
• T1055.001 — Dynamic-link Library Injection
• T1057 — Process Discovery
• T1059 — Command and Scripting Interpreter
• T1071.001 — Web Protocols
• T1082 — System Information Discovery

APT Groups Using This Malware

• TA505