TA551

Names and who uses them

• TA551Our name
• ShathakPalo Alto Networks
• GOLD CABINSecureworks

Targets

Regions: Japan, Germany

Known techniques

• T1027.003Steganography
• T1027.010Command Obfuscation
• T1036Masquerading
• T1059.003Windows Command Shell
• T1071.001Web Protocols
• T1105Ingress Tool Transfer
• T1132.001Standard Encoding
• T1204.002Malicious File
• T1218.005Mshta
• T1218.010Regsvr32
• T1218.011Rundll32
• T1566.001Spearphishing Attachment
• T1568.002Domain Generation Algorithms
• T1589.002Email Addresses

Malware and tools used