Malware: HOMEFRY

Description

[HOMEFRY](https://attack.mitre.org/software/S0232) is a 64-bit Windows password dumper/cracker that has previously been used in conjunction with other [Leviathan](https://attack.mitre.org/groups/G0065) backdoors. (Citation: FireEye Periscope March 2018)

External References

• mitre-attack
• FireEye Periscope March 2018

Techniques Used by This Malware

• T1003 — OS Credential Dumping
• T1027.013 — Encrypted/Encoded File
• T1059.003 — Windows Command Shell

APT Groups Using This Malware

• Leviathan