|||
|---------|------------------------|
|**ID**|**E1203**|
|**Objective(s)**|[Execution](https://github.com/MAECProject/malware-behaviors/tree/master/execution), [Impact](https://github.com/MAECProject/malware-behaviors/tree/master/impact)|
|**Related ATT&CK Technique(s)**| [Exploitation for Client Execution](https://attack.mitre.org/techniques/T1203)|

Exploit Software
================
Software is exploited - either because of a vulnerability or through its designed features - to gain access for malware. In general, exploitation may be done by a human attacker, but MBC focuses on software exploits implemented in code. Malware-specific details are below.

**See related ATT&CK Technique:** [**Exploitation for Client Execution**](https://attack.mitre.org/techniques/T1203).

Methods
-------
* **Remote Desktop Protocols (RDP)**: 
* **Java-based Web Servers**: 
* **File Transfer Protocol (FTP) Servers**:
* **Red Hat JBoss Enterprise Products**:

Malware Examples
----------------
|Name|Date|Description|
|-----------------------------|--------|-----------------------------|
|[**SamSam**](https://github.com/MAECProject/malware-behaviors/blob/master/xample-malware/samsam.md) |   | Attackers associated with SamSam exploit vulnerabilities in remote desktop protocols (RDP), Java-based web servers, or file transfer protocol (FTP) servers. [[1]](#1)|

References
----------
<a name="1">[1]</a>https://blog.malwarebytes.com/cybercrime/2018/05/samsam-ransomware-need-know/