adbupd

S0202

About this malware

adbupd is a backdoor used by PLATINUM that is similar to Dipsind.

Technique	Procedure example
T1059.003 Windows Command Shell	adbupd can run a copy of cmd.exe. Microsoft PLATINUM April 2016
T1546.003 Windows Management Instrumentation Event Subscription	adbupd can use a WMI script to achieve persistence. Microsoft PLATINUM April 2016
T1573.002 Asymmetric Cryptography	adbupd contains a copy of the OpenSSL library to encrypt C2 traffic. Microsoft PLATINUM April 2016

None recorded.

Microsoft PLATINUM April 2016 Open source
Windows Defender Advanced Threat Hunting Team. (2016, April 29). PLATINUM: Targeted attacks in South and Southeast Asia. Retrieved February 15, 2018.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.