Skip to content

S0022 Uroburos

Uroburos is a rootkit used by Turla. 1

Item Value
ID S0022
Version 1.0
Created 31 May 2017
Last Modified 17 October 2018
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
enterprise T1027 Obfuscated Files or Information -
enterprise T1027.002 Software Packing Uroburos uses a custom packer.2
enterprise T1014 Rootkit Uroburos is a rootkit used by Turla.1

Groups That Use This Software

ID Name References
G0010 Turla 1


Back to top