Reconstructing Executables Part 1: Between Files and Memory
Tags
attack-pattern: Data Malware - T1587.001 Malware - T1588.001 Native Api - T1575 Process Doppelgänging - T1055.013 Tool - T1588.002 Automated Collection - T1119 Execution Through Api - T1106 Process Doppelgänging - T1186 Automated Collection
Show in Graph
Common Information
Type Value
UUID 0547deb8-f7ad-4a66-b435-fa891dba273a
Fingerprint 3c15f97334258380
Analysis status DONE
Considered CTI value 0
Text language
Published April 17, 2024, 7:40 a.m.
Added to db Aug. 31, 2024, 10:48 a.m.
Last updated Aug. 31, 2024, 10:48 a.m.
Headline Reconstructing Executables Part 1: Between Files and Memory
Title Reconstructing Executables Part 1: Between Files and Memory
Detected Hints/Tags/Attributes 24/1/0
Source URLs
Redirection Url
Details Source https://www.huntandhackett.com/blog/reconstructing-executables-part1
URL Provider
Details Provider Source level domain
Details huntandhackett.com www.huntandhackett.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 412 ✔ Hunt & Hackett Blog https://www.huntandhackett.com/blog/rss.xml 2024-08-30 22:08