AuditCred — Malware Profile

AuditCred is a malicious DLL that has been used by Lazarus Group during their 2018 attacks.

MITRE ATT&CK techniques (9)

• T1027.013 Encrypted/Encoded File
• T1055 Process Injection
• T1059.003 Windows Command Shell
• T1070.004 File Deletion
• T1083 File and Directory Discovery
• T1090 Proxy
• T1105 Ingress Tool Transfer
• T1140 Deobfuscate/Decode Files or Information
• T1543.003 Windows Service

Attributed threat actors

• Lazarus Group

Read the full analysis on IntelFusions