Search/Aria-body
● Malware

Aria-body

Aria-body is a custom backdoor that has been used by Naikon since approximately 2017.

View graph Watch Export
Indicators tracked
0
Intelligence Reports10
10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
25 relationships
T1113: Screen Capture
source
T1033: System Owner/User Discovery
source
T1027.013: Encrypted/Encoded File
source
T1568.002: Domain Generation Algorithms
source
T1025: Data from Removable Media
source
T1082: System Information Discovery
source
T1106: Native API
source
T1140: Deobfuscate/Decode Files or Information
source
T1010: Application Window Discovery
source
T1560: Archive Collected Data
source
T1134.002: Create Process with Token
source
T1016: System Network Configuration Discovery
source
T1090: Proxy
source
T1083: File and Directory Discovery
source
T1049: System Network Connections Discovery
source
T1134.001: Token Impersonation/Theft
source
T1057: Process Discovery
source
T1547.001: Registry Run Keys / Startup Folder
source
T1095: Non-Application Layer Protocol
source
T1070.004: File Deletion
source
T1071.001: Web Protocols
source
T1105: Ingress Tool Transfer
source
T1680: Local Storage Discovery
source
T1055.001: Dynamic-link Library Injection
source