PROMETHIUM

Names and who uses them

• PROMETHIUMOur name
• StrongPityMITRE ATT&CK

Known techniques

• T1036.004Masquerade Task or Service
• T1036.005Match Legitimate Resource Name or Location
• T1078.003Local Accounts
• T1189Drive-by Compromise
• T1204.002Malicious File
• T1205.001Port Knocking
• T1543.003Windows Service
• T1547.001Registry Run Keys / Startup Folder
• T1553.002Code Signing
• T1587.002Code Signing Certificates
• T1587.003Digital Certificates

Malware and tools used