Gorgon Group

Targets

Sectors: Government

Regions: United States, United Kingdom

Known techniques

• T1055.002Portable Executable Injection
• T1055.012Process Hollowing
• T1059.001PowerShell
• T1059.003Windows Command Shell
• T1059.005Visual Basic
• T1105Ingress Tool Transfer
• T1106Native API
• T1112Modify Registry
• T1140Deobfuscate/Decode Files or Information
• T1204.002Malicious File
• T1547.001Registry Run Keys / Startup Folder
• T1547.009Shortcut Modification
• T1564.003Hidden Window
• T1566.001Spearphishing Attachment
• T1588.002Tool
• T1685Disable or Modify Tools

Malware and tools used