Malware: Javali

Description

[Javali](https://attack.mitre.org/software/S0528) is a banking trojan that has targeted Portuguese and Spanish-speaking countries since 2017, primarily focusing on customers of financial institutions in Brazil and Mexico.(Citation: Securelist Brazilian Banking Malware July 2020)

External References

• mitre-attack
• Securelist Brazilian Banking Malware July 2020

Techniques Used by This Malware

• T1027.001 — Binary Padding
• T1057 — Process Discovery
• T1059.005 — Visual Basic
• T1102.001 — Dead Drop Resolver
• T1105 — Ingress Tool Transfer
• T1204.001 — Malicious Link
• T1204.002 — Malicious File
• T1218.007 — Msiexec
• T1555.003 — Credentials from Web Browsers
• T1566.001 — Spearphishing Attachment
• T1566.002 — Spearphishing Link
• T1574.001 — DLL