DnsSystem

DnsSystem is a .NET based DNS backdoor, which is a customized version of the open source tool DIG.net, that has been used by HEXANE since at least June 2022.

View graph Watch Export

Indicators tracked

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

10 relationships

T1033: System Owner/User Discovery

source

T1132.001: Standard Encoding

source

T1071.004: DNS

source

T1204.002: Malicious File

source

T1005: Data from Local System

source

T1041: Exfiltration Over C2 Channel

source

T1547.001: Registry Run Keys / Startup Folder

source

T1059.003: Windows Command Shell

source

T1105: Ingress Tool Transfer

source