Malware: HAMMERTOSS

Description

[HAMMERTOSS](https://attack.mitre.org/software/S0037) is a backdoor that was used by [APT29](https://attack.mitre.org/groups/G0016) in 2015. (Citation: FireEye APT29) (Citation: F-Secure The Dukes)

External References

• mitre-attack
• F-Secure The Dukes
• FireEye APT29

Techniques Used by This Malware

• T1001.002 — Steganography
• T1059.001 — PowerShell
• T1071.001 — Web Protocols
• T1102.003 — One-Way Communication
• T1564.003 — Hidden Window
• T1567.002 — Exfiltration to Cloud Storage
• T1573.001 — Symmetric Cryptography

APT Groups Using This Malware

• APT29