MITRE ATT&CK Malware

HAMMERTOSS (S0037)

HammerDukeNetDuke

[HAMMERTOSS](https://attack.mitre.org/software/S0037) is a backdoor that was used by [APT29](https://attack.mitre.org/groups/G0016) in 2015. (Citation: FireEye APT29) (Citation: F-Secure The Dukes)

Platforms: Windows

▪Techniques implemented (7)

T1567.002Exfiltration to Cloud Storage T1001.002Steganography T1564.003Hidden Window T1573.001Symmetric Cryptography T1071.001Web Protocols T1059.001PowerShell T1102.003One-Way Communication

▪Used by groups (1)

G0016APT29

S0037on MITRE ATT&CK →

MITRE ATT&CK Malware

HAMMERTOSS (S0037)

HammerDukeNetDuke

ShareX LinkedIn Reddit HN

[HAMMERTOSS](https://attack.mitre.org/software/S0037) is a backdoor that was used by [APT29](https://attack.mitre.org/groups/G0016) in 2015. (Citation: FireEye APT29) (Citation: F-Secure The Dukes)

Platforms: Windows