Restoring Reflective Code Loading on macOS
Tags
| attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Reflective Code Loading - T1620 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 8adaf2e5-b824-4841-b73f-9981c97c24ec |
| Fingerprint | 2f9499918fa73786 |
| Analysis status | DONE |
| Considered CTI value | 1 |
| Text language | |
| Published | Dec. 16, 2024, midnight |
| Added to db | Dec. 17, 2024, 8:46 a.m. |
| Last updated | Dec. 19, 2024, 5:30 a.m. |
| Headline | UNKNOWN |
| Title | Restoring Reflective Code Loading on macOS |
| Detected Hints/Tags/Attributes | 70/1/12 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://objective-see.org/blog/blog_0x7C.html |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 186 | ✔ | Objective-See's Blog | https://objective-see.org/rss.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 550 | pic.twitter.com |
|
| Details | Domain | 22 | filemonitor.app |
|
| Details | Domain | 51 | file.io |
|
| Details | Domain | 36 | com.apple.security |
|
| Details | Domain | 4389 | github.com |
|
| Details | File | 4 | loader.cpp |
|
| Details | File | 17 | security.cs |
|
| Details | Github username | 1 | pwardle |
|
| Details | MITRE ATT&CK Techniques | 97 | T1620 |
|
| Details | Url | 1 | https://file.io/px4hvdolgano |
|
| Details | Url | 1 | https://github.com/pwardle/reflectiveloader. |
|
| Details | Url | 1 | https://file.io/iakv6nc6jdc8 |