GRIFFON — Malware Profile
GRIFFON is a JavaScript backdoor used by FIN7.
MITRE ATT&CK techniques (8)
- T1053.005 Scheduled Task
- T1059.001 PowerShell
- T1059.007 JavaScript
- T1069.002 Domain Groups
- T1082 System Information Discovery
- T1113 Screen Capture
- T1124 System Time Discovery
- T1547.001 Registry Run Keys / Startup Folder