Malware: QUIETCANARY

Description

[QUIETCANARY](https://attack.mitre.org/software/S1076) is a backdoor tool written in .NET that has been used since at least 2022 to gather and exfiltrate data from victim networks.(Citation: Mandiant Suspected Turla Campaign February 2023)

External References

• mitre-attack
• Mandiant Suspected Turla Campaign February 2023

Techniques Used by This Malware

• T1012 — Query Registry
• T1016 — System Network Configuration Discovery
• T1071.001 — Web Protocols
• T1074 — Data Staged
• T1106 — Native API
• T1132.001 — Standard Encoding
• T1140 — Deobfuscate/Decode Files or Information
• T1564.003 — Hidden Window
• T1573.001 — Symmetric Cryptography