# Denis > Tipo: **malware** · S0354 · [MITRE ATT&CK](https://attack.mitre.org/software/S0354) ## Descrição [[s0354-denis|Denis]] é um backdoor e Trojan para Windows utilizado pelo [[g0050-apt32|APT32]]. O [[s0354-denis|Denis]] compartilha diversas semelhanças com o backdoor [[s0157-soundbite|SOUNDBITE]] e foi utilizado em conjunto com o backdoor [[s0477-goopy|Goopy]]. **Plataformas:** Windows ## Técnicas Utilizadas - [[t1071-004-dns|T1071.004 - DNS]] - [[t1070-004-file-deletion|T1070.004 - File Deletion]] - [[t1497-001-system-checks|T1497.001 - System Checks]] - [[t1105-ingress-tool-transfer|T1105 - Ingress Tool Transfer]] - [[t1055-012-process-hollowing|T1055.012 - Process Hollowing]] - [[t1082-system-information-discovery|T1082 - System Information Discovery]] - [[t1012-query-registry|T1012 - Query Registry]] - [[t1140-deobfuscatedecode-files-or-information|T1140 - Deobfuscaté/Decode Files or Information]] - [[t1027-010-command-obfuscation|T1027.010 - Command Obfuscation]] - [[t1016-system-network-configuration-discovery|T1016 - System Network Configuration Discovery]] - [[t1132-001-standard-encoding|T1132.001 - Standard Encoding]] - [[t1560-002-archive-via-library|T1560.002 - Archive via Library]] - [[t1574-hijack-execution-flow|T1574 - Hijack Execution Flow]] - [[t1083-file-and-directory-discovery|T1083 - File and Directory Discovery]] - [[t1106-native-api|T1106 - Native API]] ## Grupos que Usam - [[g0050-apt32|APT32]] ## Referências - [MITRE ATT&CK - S0354](https://attack.mitre.org/software/S0354)