Silence

Names and who uses them

• SilenceOur name
• Whisper SpiderCrowdStrike

Targets

Sectors: Finance

Regions: Ukraine

Known techniques

• T1003.001LSASS Memory
• T1018Remote System Discovery
• T1021.001Remote Desktop Protocol
• T1027.010Command Obfuscation
• T1036.005Match Legitimate Resource Name or Location
• T1053.005Scheduled Task
• T1055Process Injection
• T1059.001PowerShell
• T1059.003Windows Command Shell
• T1059.005Visual Basic
• T1059.007JavaScript
• T1070.004File Deletion
• T1072Software Deployment Tools
• T1078Valid Accounts
• T1090.002External Proxy
• T1105Ingress Tool Transfer
• T1106Native API
• T1112Modify Registry
• T1113Screen Capture
• T1125Video Capture
• T1204.002Malicious File
• T1218.001Compiled HTML File
• T1547.001Registry Run Keys / Startup Folder
• T1553.002Code Signing
• T1566.001Spearphishing Attachment
• T1569.002Service Execution
• T1571Non-Standard Port
• T1588.002Tool

Malware and tools used