StarProxy — Malware Profile
StarProxy is custom malware used by Mustang Panda as a post-compromise tool, to enable proxying of traffic between the infected machine and other machines on the same network.
MITRE ATT&CK techniques (9)
- T1001.003 Protocol or Service Impersonation
- T1059 Command and Scripting Interpreter
- T1090.001 Internal Proxy
- T1095 Non-Application Layer Protocol
- T1106 Native API
- T1124 System Time Discovery
- T1140 Deobfuscate/Decode Files or Information
- T1573.001 Symmetric Cryptography
- T1574.001 DLL