1. Home
  2. Software
  3. BS2005

BS2005

BS2005 is malware that was used by Ke3chang in spearphishing campaigns since at least 2011. [1]

ID: S0014
ⓘ
Type: MALWARE
ⓘ
Platforms: Windows
Version: 1.1
Created: 31 May 2017
Last Modified: 01 November 2021
Enterprise Layer
download view

Techniques Used

Domain ID Name Use
Enterprise T1132 .001 Data Encoding: Standard Encoding

BS2005 uses Base64 encoding for communication in the message body of an HTTP request.[1]

References

  1. Villeneuve, N., Bennett, J. T., Moran, N., Haq, T., Scott, M., & Geers, K. (2014). OPERATION “KE3CHANG”: Targeted Attacks Against Ministries of Foreign Affairs. Retrieved November 12, 2014.