avatar

Emanuele De Lucia

@edelucia
0 followers40 downloads0 copies2 likes42 views

1 detection

Detects TTPs associated with a Lazarus subgroup using the SessionEnv service for persistence and privilege escalation. This involves phantom DLL loading, service auto-start configuration, and registry modification for elevated privileges.
avatar
Emanuele De Lucia@edelucia
avatar
Detections.ai Community
1 year ago
0242