MITRE ATT&CK technique · Resource Development

`T1608.001` Upload Malware

Sub-technique of T1608 Stage Capabilities

Adversaries may upload malware to third-party or adversary controlled infrastructure to make it accessible during targeting. Malicious software can include payloads, droppers, post-compromise tools, backdoors, and a variety of other malicious content. Adversaries may upload malware to support their operations, such as making a payload available to a victim network to enable [Ingress Tool…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

TeamPCP
Callisto
Shai-Hulud
Sandworm
Earth Lusca

Sigma rules to hunt it

SigmaHQ has no rules for this technique.

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.