Subhankar H
@Shubho570 followers238 downloads17 copies0 likes800 views
18 detections
Filters
Last updated
All Time
Detection languages
11
7
Categories
7
4
3
3
3
Platforms
12
MITRE Techniques
8
5
5
4
3
Detects ShadowSniff info-stealer based on strings, PDB path, and behavioral indicators.
No description available.
No description available.
No description available.
No description available.
No description available.
No description available.
Detects persistence and execution artifacts associated with the Latrodectus malware. This includes the creation of a misspelled registry run key ('sentinelssheduler') and the execution of a payload masquerading as SentinelOne from a non-standard AppData path.
Detects a PowerShell script that uses Invoke-WebRequest with custom headers to download a file, which is then executed via Start-Process. This technique is used by malware to bypass simple network filtering or for C2 authentication. It was observed in a campaign delivering multiple RAT families including AsyncRAT, DCRAT, and PUREHVNC.
Detects activity associated with the Hannibal Stealer, a .NET info-stealer known for targeting cryptocurrency wallets, VPN configurations, and browser data.
Page 1 of 2