Smarth Arora
@smarthxaroraToronto, ONCompletionist
1 follower243 downloads39 copies0 likes1,306 views
22 detections
Filters
Last updated
All Time
Detection languages
22
Categories
8
5
4
3
3
Platforms
11
8
5
5
3
Products / Services
6
6
4
2
2
MITRE Techniques
12
8
7
7
7
Detects the creation of scheduled tasks associated with the Dragon Boss Solutions AV killer malware. These tasks (e.g., 'DisableClockServicesFirst', 'RemoveClockPeriodic') are critical for the malware's continuous AV suppression and deep cleanup operations across reboots and logons.
Detects the creation of WMI event consumers associated with the Dragon Boss AV killer, specifically looking for names containing 'MbRemovalMbSetupKillConsumer'. This mechanism is actively used by this campaign to ensure immediate termination of AV setup processes upon system boot.
Page 3 of 3