Check out the results from our first round of ATT&CK Evaluations at attackevals.mitre.org!

Uroburos

Uroburos is a rootkit used by Turla. [1]

ID: S0022
Aliases: Uroburos
Type: MALWARE
Platforms: Windows

Version: 1.0

Alias Descriptions

NameDescription
Uroburos[1]

Techniques Used

DomainIDNameUse
EnterpriseT1014RootkitUroburos is a rootkit used by Turla.[1]
EnterpriseT1045Software PackingUroburos uses a custom packer.[2]

Groups

Groups that use this software:

Turla

References