T1587.001 Develop Capabilities: Malware

Adversaries may develop malware and malware components that can be used during targeting. MITRE ATT&CK

Part of

MITRE ATT&CK

T1587Develop Capabilities

process creation, the highest levels first

highConti Volume Shadow ListingMax Altgelt (Nextron Systems), Tobias Michalski (Nextron Systems) · Windows

highFormbook Process CreationFlorian Roth (Nextron Systems), oscd.community, Jonhnathan Ribeiro · Windows

highMustang Panda DropperFlorian Roth (Nextron Systems), oscd.community · Windows

highPotential Privilege Escalation To LOCAL SYSTEMFlorian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) · Windows

highPotential PsExec Remote ExecutionFlorian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) · Windows

highPsExec/PAExec Escalation to LOCAL SYSTEMFlorian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) · Windows

highPUA - CsExec ExecutionFlorian Roth (Nextron Systems) · Windows