Understanding Sleep Obfuscation | Binary Defense
Tags
cmtmf-attack-pattern: Process Injection
attack-pattern: Data Asynchronous Procedure Call - T1055.004 Malware - T1587.001 Malware - T1588.001 Process Injection - T1631 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Process Injection - T1055
Show in Graph
Common Information
Type Value
UUID 23dbd99f-4475-4b44-82b1-e3e51f626ad1
Fingerprint b6508943acb616c8
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 28, 2024, 1 p.m.
Added to db Aug. 31, 2024, 9:06 a.m.
Last updated Dec. 23, 2024, 12:17 p.m.
Headline Understanding Sleep Obfuscation
Title Understanding Sleep Obfuscation | Binary Defense
Detected Hints/Tags/Attributes 47/2/8
Source URLs
Redirection Url
Details Source https://www.binarydefense.com/resources/blog/understanding-sleep-obfuscation/
URL Provider
Details Provider Source level domain
Details binarydefense.com www.binarydefense.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 275 ✔ Binary Defense https://www.binarydefense.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4702 
github.com
Details File 1 
rop.asm
Details Github username 4 
cracked5pider
Details Github username 4 
idov31
Details Github username 2 
realoriginal
Details Url 3 
https://github.com/cracked5pider/ekko
Details Url 1 
https://github.com/idov31/cronos
Details Url 1 
https://github.com/realoriginal/foliage