Malware: Spark

Description

[Spark](https://attack.mitre.org/software/S0543) is a Windows backdoor and has been in use since as early as 2017.(Citation: Unit42 Molerat Mar 2020)

External References

• mitre-attack
• Unit42 Molerat Mar 2020

Techniques Used by This Malware

• T1027.002 — Software Packing
• T1033 — System Owner/User Discovery
• T1041 — Exfiltration Over C2 Channel
• T1059.003 — Windows Command Shell
• T1071.001 — Web Protocols
• T1082 — System Information Discovery
• T1132.001 — Standard Encoding
• T1140 — Deobfuscate/Decode Files or Information
• T1497.002 — User Activity Based Checks
• T1614.001 — System Language Discovery

APT Groups Using This Malware

• Molerats