Malware: SslMM

Description

[SslMM](https://attack.mitre.org/software/S0058) is a full-featured backdoor used by [Naikon](https://attack.mitre.org/groups/G0019) that has multiple variants. (Citation: Baumgartner Naikon 2015)

External References

• mitre-attack
• Baumgartner Naikon 2015

Techniques Used by This Malware

• T1008 — Fallback Channels
• T1033 — System Owner/User Discovery
• T1036.005 — Match Legitimate Resource Name or Location
• T1056.001 — Keylogging
• T1082 — System Information Discovery
• T1134 — Access Token Manipulation
• T1547.001 — Registry Run Keys / Startup Folder
• T1547.009 — Shortcut Modification
• T1562.001 — Disable or Modify Tools

APT Groups Using This Malware

• Naikon