Molerats

Names and who uses them

• MoleratsOur name
• Operation MoleratsMandiant
• Gaza CybergangMITRE ATT&CK

Targets

Regions: Europe, Middle East, United States

Known techniques

• T1027.015Compression
• T1053.005Scheduled Task
• T1057Process Discovery
• T1059.001PowerShell
• T1059.005Visual Basic
• T1059.007JavaScript
• T1105Ingress Tool Transfer
• T1140Deobfuscate/Decode Files or Information
• T1204.001Malicious Link
• T1204.002Malicious File
• T1218.007Msiexec
• T1547.001Registry Run Keys / Startup Folder
• T1553.002Code Signing
• T1555.003Credentials from Web Browsers
• T1566.001Spearphishing Attachment
• T1566.002Spearphishing Link

Malware and tools used