SOUNDBITE

Description

(FireEye) • C2 communications via DNS • Process creation • File upload • Shell command execution • File and directory enumeration/manipulation • Window enumeration • Registry manipulation • System information gathering

Names

Name
SOUNDBITE
Denis

Category

Malware

Type

• Reconnaissance
• Backdoor
• Downloader
• Tunneling
• Exfiltration

Information

• https://www.fireeye.com/blog/threat-research/2017/05/cyber-espionage-apt32.html
• https://securelist.com/use-of-dns-tunneling-for-cc-communications/78203/
• https://ruxcon.org.au/assets/2017/slides/bart-RuxCon-Presentation.pptx
• https://www.cylance.com/content/dam/cylance-web/en-us/resources/knowledge-center/resource-library/reports/SpyRATsofOceanLotusMalwareWhitePaper.pdf

Mitre Attack

• https://attack.mitre.org/software/S0354/
• https://attack.mitre.org/software/S0157/

Malpedia

• https://malpedia.caad.fkie.fraunhofer.de/details/win.soundbite

Alienvault Otx

• https://otx.alienvault.com/browse/pulses?q=tag:SOUNDBITE

Other Information

Uuid

771e976f-81e0-4775-a542-9cdbd531713d

Last Card Change

2022-12-29