MITRE ATT&CK Malware

BabyShark (S0414)

LATEOP

[BabyShark](https://attack.mitre.org/software/S0414) is a Microsoft Visual Basic (VB) script-based malware family that is believed to be associated with several North Korean campaigns. (Citation: Unit42 BabyShark Feb 2019)

Platforms: Windows

▪Techniques implemented (16)

T1053.005Scheduled Task T1033System Owner/User Discovery T1105Ingress Tool Transfer T1012Query Registry T1218.005Mshta T1056.001Keylogging T1057Process Discovery T1059.005Visual Basic T1083File and Directory Discovery T1140Deobfuscate/Decode Files or Information T1082System Information Discovery T1132.001Standard Encoding T1070.004File Deletion T1547.001Registry Run Keys / Startup Folder T1016System Network Configuration Discovery T1059.003Windows Command Shell

▪Used by groups (1)

G0094Kimsuky

S0414on MITRE ATT&CK →

MITRE ATT&CK Malware

BabyShark (S0414)

LATEOP

ShareX LinkedIn Reddit HN

Platforms: Windows

▪Techniques implemented (16)

▪Used by groups (1)

G0094Kimsuky

S0414on MITRE ATT&CK →

BabyShark (S0414)

▪Techniques implemented (16)

▪Used by groups (1)

Explore Gold

Security Data & Tools

Products

Use Cases

Company

BabyShark (S0414)

▪Techniques implemented (16)

▪Used by groups (1)