LuminousMoth

Targets

Sectors: Government

Regions: South East Asia

Known techniques

• T1005Data from Local System
• T1030Data Transfer Size Limits
• T1033System Owner/User Discovery
• T1036.005Match Legitimate Resource Name or Location
• T1041Exfiltration Over C2 Channel
• T1053.005Scheduled Task
• T1071.001Web Protocols
• T1083File and Directory Discovery
• T1091Replication Through Removable Media
• T1105Ingress Tool Transfer
• T1112Modify Registry
• T1204.001Malicious Link
• T1539Steal Web Session Cookie
• T1547.001Registry Run Keys / Startup Folder
• T1553.002Code Signing
• T1557.002ARP Cache Poisoning
• T1560Archive Collected Data
• T1564.001Hidden Files and Directories
• T1566.002Spearphishing Link
• T1567.002Exfiltration to Cloud Storage
• T1574.001DLL
• T1587.001Malware
• T1588.001Malware
• T1588.002Tool
• T1588.004Digital Certificates
• T1608.001Upload Malware
• T1608.004Drive-by Target
• T1608.005Link Target

Malware and tools used