[Intel]: https://cujo.com/threat-alert-krane-malware/

[timb-machine]

Area

Malware reports

Parent threat

Initial Access, Persistence, Defense Evasion, Impact

Finding

https://cujo.com/threat-alert-krane-malware/

Industry reference

attack:T1110.003:Password Spraying
attack:T098:Account Manipulation
attack:T1105:Ingress Tool Transfer
attack:T1562.003:Impair Command History Logging
attack:T1070.002:Clear Linux or Mac System Logs
attack:T1082:System Information Discovery
attack:T1018:Remote System Discovery
attack:T1021:Remote Services
uses:Non-persistentStorage

Malware reference

Krane
wltm

Actor reference

No response

Component

No response

Scenario

No response