Description
DUSTTRAP is a multi-stage plugin framework associated with APT41 operations, built around multiple components that flexibly extend its functionality.
Stats
- First seen
- December 2024
- Last seen
- September 2026
MITRE ATT&CK techniques
29 techniques across 7 tactics.
TA0005 Stealth
TA0007 Discovery
- T1010Application Window Discovery
- T1012Query Registry
- T1016System Network Configuration Discovery
- T1018Remote System Discovery
- T1057Process Discovery
- T1082System Information Discovery
- T1083File and Directory Discovery
- T1087Account Discovery
- T1124System Time Discovery
- T1135Network Share Discovery
- T1482Domain Trust Discovery
- T1518Software Discovery
- T1518.001Security Software Discovery
- T1615Group Policy Discovery
- T1654Log Enumeration
TA0009 Collection
TA0011 Command and Control
- T1105Ingress Tool Transfer
TA0010 Exfiltration
- T1041Exfiltration Over C2 Channel
Associated groups
Associated campaigns
Alert name variants
| Alert Name |
|---|
| Win64.Trojan.Dusttrap |
