Malware Persistence Locations: Windows and Linux - Marco Ramilli
Tags
attack-pattern: Cron - T1053.003 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Scheduled Task - T1053.005 Software - T1592.002 Windows Service - T1543.003 Tool - T1588.002 Browser Extensions - T1176 Powershell - T1086 Rootkit - T1014 Scheduled Task - T1053 Rootkit
Show in Graph
Common Information
Type Value
UUID 5b0902cd-24b4-4b8f-8fb7-f8e64553092c
Fingerprint 8028104da9798fd9
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 23, 2023, 4:25 a.m.
Added to db Sept. 19, 2024, 1:16 p.m.
Last updated Nov. 14, 2024, 2:04 p.m.
Headline Malware Persistence Locations: Windows and Linux
Title Malware Persistence Locations: Windows and Linux - Marco Ramilli
Detected Hints/Tags/Attributes 41/1/10
Source URLs
Redirection Url
Details Source https://marcoramilli.com/malware-persistence-locations-windows-and-linux/
URL Provider
Details Provider Source level domain
Details marcoramilli.com marcoramilli.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 160 ✔ Marco Ramilli https://marcoramilli.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 372 
wscript.shell
Details Domain 13 
shortcut.save
Details Domain 41 
multi-user.target
Details Domain 2 
libmylib.so
Details Domain 117 
ld.so
Details Domain 2 
libmymalware.so
Details File 35 
malware.exe
Details File 13 
shortcut.tar
Details File 1 
c:\malware.dll
Details File 37 
multi-user.tar