Jeriel Udom
@John0070 followers5 downloads0 copies1 like87 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Categories
1
1
Platforms
1
MITRE Techniques
1
1
1
1
1
Detects the creation of a scheduled task by a process named 'lsassa.exe', a .NET backdoor used by Lunar Spider. The malware masquerades as the legitimate 'lsass.exe' process and establishes persistence by creating a task that runs on startup.
