Malware: TURNEDUP

Description

[TURNEDUP](https://attack.mitre.org/software/S0199) is a non-public backdoor. It has been dropped by [APT33](https://attack.mitre.org/groups/G0064)'s [StoneDrill](https://attack.mitre.org/software/S0380) malware. (Citation: FireEye APT33 Sept 2017) (Citation: FireEye APT33 Webinar Sept 2017)

External References

• mitre-attack
• FireEye APT33 Sept 2017
• FireEye APT33 Webinar Sept 2017

Techniques Used by This Malware

• T1055.004 — Asynchronous Procedure Call
• T1059.003 — Windows Command Shell
• T1082 — System Information Discovery
• T1105 — Ingress Tool Transfer
• T1113 — Screen Capture
• T1547.001 — Registry Run Keys / Startup Folder

APT Groups Using This Malware

• APT33