Multiple Command and Control (C2) Frameworks During Red Team Engagements
Tags
cmtmf-attack-pattern: Application Layer Protocol Stage Capabilities
maec-delivery-vectors: Watering Hole
attack-pattern: Data Application Layer Protocol - T1437 Dynamic Resolution - T1637 Dynamic Resolution - T1568 Encrypted Channel - T1521 Encrypted Channel - T1573 Ingress Tool Transfer - T1544 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Non-Standard Port - T1509 Non-Standard Port - T1571 Phishing - T1660 Phishing - T1566 Port Knocking - T1205.001 Traffic Signaling - T1205 Protocol Tunneling - T1572 Remote Access Software - T1663 Ssh - T1021.004 Stage Capabilities - T1608 Steganography - T1001.002 Steganography - T1406.001 Steganography - T1027.003 Vnc - T1021.005 Web Service - T1481 Vulnerabilities - T1588.006 Standard Application Layer Protocol - T1071 Communication Through Removable Media - T1092 Connection Proxy - T1090 Data Encoding - T1132 Data Obfuscation - T1001 Fallback Channels - T1008 Remote File Copy - T1105 Multi-Stage Channels - T1104 Standard Non-Application Layer Protocol - T1095 Remote Access Tools - T1219 Web Service - T1102
Show in Graph
Common Information
Type Value
UUID 4ce2fdf4-5418-48d5-bda3-82d07ff3cd14
Fingerprint b52bbb31013dbbd2
Analysis status DONE
Considered CTI value -2
Text language
Published Sept. 21, 2023, 1 p.m.
Added to db Nov. 19, 2023, 6:07 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Multiple Command and Control (C2) Frameworks During Red Team Engagements
Title Multiple Command and Control (C2) Frameworks During Red Team Engagements
Detected Hints/Tags/Attributes 75/3/21
Source URLs
Redirection Url
Details Source https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/multiple-command-and-control-c2-frameworks-during-red-team-engagements/
URL Provider
Details Provider Source level domain
Details trustwave.com www.trustwave.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 386 ✔ SpiderLabs Blog https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 360 
attack.mitre.org
Details Domain 2 
www.thec2matrix.com
Details MITRE ATT&CK Techniques 444 
T1071
Details MITRE ATT&CK Techniques 9 
T1092
Details MITRE ATT&CK Techniques 96 
T1132
Details MITRE ATT&CK Techniques 75 
T1001
Details MITRE ATT&CK Techniques 27 
T1568
Details MITRE ATT&CK Techniques 163 
T1573
Details MITRE ATT&CK Techniques 41 
T1008
Details MITRE ATT&CK Techniques 492 
T1105
Details MITRE ATT&CK Techniques 25 
T1104
Details MITRE ATT&CK Techniques 159 
T1095
Details MITRE ATT&CK Techniques 115 
T1571
Details MITRE ATT&CK Techniques 95 
T1572
Details MITRE ATT&CK Techniques 152 
T1090
Details MITRE ATT&CK Techniques 141 
T1219
Details MITRE ATT&CK Techniques 19 
T1205
Details Url 5 
https://attack.mitre.org/tactics/ta0011
Details Url 1 
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/want-to-become-a-red-teamer-this-is-what-you-need-to-know
Details Url 57 
https://attack.mitre.org
Details Url 1 
https://www.thec2matrix.com/matrix