# Neoichor > Tipo: **malware** · S0691 · [MITRE ATT&CK](https://attack.mitre.org/software/S0691) ## Descrição [[s0691-neoichor|Neoichor]] é um malware de C2 utilizado pelo [[g0004-apt15|Ke3chang]] desde pelo menos 2019; famílias de malware similares usadas pelo grupo incluem Leeson e Numbldea. **Plataformas:** Windows ## Técnicas Utilizadas - [[t1016-001-internet-connection-discovery|T1016.001 - Internet Connection Discovery]] - [[t1105-ingress-tool-transfer|T1105 - Ingress Tool Transfer]] - [[t1614-001-system-language-discovery|T1614.001 - System Language Discovery]] - [[t1033-system-owneruser-discovery|T1033 - System Owner/User Discovery]] - [[t1112-modify-registry|T1112 - Modify Registry]] - [[t1005-data-from-local-system|T1005 - Data from Local System]] - [[t1016-system-network-configuration-discovery|T1016 - System Network Configuration Discovery]] - [[t1082-system-information-discovery|T1082 - System Information Discovery]] - [[t1559-001-component-object-model|T1559.001 - Component Object Model]] - [[t1071-001-web-protocols|T1071.001 - Web Protocols]] - [[t1070-indicator-removal|T1070 - Indicator Removal]] ## Grupos que Usam - [[g0004-apt15|Ke3chang]] ## Referências - [MITRE ATT&CK - S0691](https://attack.mitre.org/software/S0691)