Malware: Neo-reGeorg

Description

[Neo-reGeorg](https://attack.mitre.org/software/S1189) is an open-source web shell designed as a restructuring of [reGeorg](https://attack.mitre.org/software/S1187) with improved usability, security, and fixes for exising [reGeorg](https://attack.mitre.org/software/S1187) bugs.(Citation: GitHub Neo-reGeorg 2019)

External References

• mitre-attack
• GitHub Neo-reGeorg 2019

Techniques Used by This Malware

• T1059.006 — Python
• T1071.001 — Web Protocols
• T1090 — Proxy
• T1095 — Non-Application Layer Protocol
• T1105 — Ingress Tool Transfer
• T1132.002 — Non-Standard Encoding
• T1505.003 — Web Shell
• T1572 — Protocol Tunneling

APT Groups Using This Malware

• Sandworm Team