H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

Briba

[Briba](https://attack.mitre.org/software/S0204) is a trojan used by [Elderwood](https://attack.mitre.org/groups/G0066) to open a backdoor and download files on to compromised hosts. (Citation: Symantec Elderwood Sept 2012) (Citation: Symantec Briba May 2012)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[Briba](https://attack.mitre.org/software/S0204) is a trojan used by [Elderwood](https://attack.mitre.org/groups/G0066) to open a backdoor and download files on to compromised hosts. (Citation: Symantec Elderwood Sept 2012) (Citation: Symantec Briba May 2012)

Labels

malware
5 recorded

Relationships

uses
to Ingress Tool Transfer
Technique
uses
to Registry Run Keys / Startup Folder
Technique
uses
to Rundll32
Technique
uses
to Windows Service
Technique
uses
from Elderwood
Group
4 external

References

mitre-attack
S0204
open
Briba
—
Symantec Briba May 2012
https://www.symantec.com/security_response/writeup.jsp?docid=2012-051515-2843-99
open
Symantec Elderwood Sept 2012
https://web.archive.org/web/20190717233006/http:/www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/the-elderwood-project.pdf
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance