Malware: build_downer

Description

[build_downer](https://attack.mitre.org/software/S0471) is a downloader that has been used by [BRONZE BUTLER](https://attack.mitre.org/groups/G0060) since at least 2019.(Citation: Trend Micro Tick November 2019)

External References

• mitre-attack
• Trend Micro Tick November 2019

Techniques Used by This Malware

• T1027.003 — Steganography
• T1036.004 — Masquerade Task or Service
• T1082 — System Information Discovery
• T1105 — Ingress Tool Transfer
• T1106 — Native API
• T1124 — System Time Discovery
• T1518.001 — Security Software Discovery
• T1547.001 — Registry Run Keys / Startup Folder

APT Groups Using This Malware

• BRONZE BUTLER