unolkp.blogg.se

Installs hooks/patches the running process Source Hybrid Analysis Technology relevance 8/10

YARA signature "NetWiredRC_B_rat" matched process "mscftmon.exe" as "NetWiredRC" based on indicators: "%d:%I64u:%s%s ,%s%.2d-%.2d-%.4d, - ,%.2d/%.2d/%d %.2d:%.2d:%.2d," (Author: Jean-Philippe Teissier / signature "NetWiredRC_B_rat" matched process "winsystems圆3.exe" as "NetWiredRC" based on indicators: "%d:%I64u:%s%s ,%s%.2d-%.2d-%.4d, - ,%.2d/%.2d/%d %.2d:%.2d:%.2d," (Author: Jean-Philippe Teissier / YARA Signature relevance 10/10Ĭontains ability to reboot/shutdown the operating ( Show ( Show ( Show ( Show ( Show ( Show ( Show from winsystems圆3.exe (PID: 2368) ( Show from mscftmon.exe (PID: 2348) ( Show from mscftmon.exe (PID: 2348) ( Show from mscftmon.exe (PID: 2348) ( Show from mscftmon.exe (PID: 2348) ( Show from mscftmon.exe (PID: 2348) ( Show from mscftmon.exe (PID: 2348) ( Show from mscftmon.exe (PID: 2348) ( Show from mscftmon.exe (PID: 2792) ( Show Stream)