malware

DanBot

S1014 · ATT&CK v19.2

Platforms

Windows

Tracked actors

Description

[DanBot](https://attack.mitre.org/software/S1014) is a first-stage remote access Trojan written in C# that has been used by [HEXANE](https://attack.mitre.org/groups/G1001) since at least 2018.(Citation: SecureWorks August 2019)

Actors that use this

1 tracked actor

HEXANE (Lyceum)ATT&CK-attributed