| Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
System Owner/User Discovery - T1033 (03d7999c-1f4c-42cc-8373-e7690d318104) |
Attack Pattern |
1 |
| Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
Browser Information Discovery - T1217 (5e4a2073-9643-44cb-a0b5-e7f4048446c7) |
Attack Pattern |
1 |
| Reflective Code Loading - T1620 (4933e63b-9b77-476e-ab29-761bc5b7d15a) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| System Information Discovery - T1082 (354a7f88-63fb-41b5-a801-ce3b377b36f1) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Security Software Discovery - T1518.001 (cba37adb-d6fb-4610-b069-dd04c0643384) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Process Discovery - T1057 (8f4a33ec-8b1f-4b80-a2f6-642b2e479580) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
Portable Executable Injection - T1055.002 (806a49c4-970d-43f9-9acc-ac0ee11e6662) |
Attack Pattern |
1 |
| Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
Credentials from Web Browsers - T1555.003 (58a3e6aa-4453-4cc8-a51f-4befe80b31a8) |
Attack Pattern |
1 |
| System Network Connections Discovery - T1049 (7e150503-88e7-4861-866b-ff1ac82c4475) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Encrypted Channel - T1573 (b8902400-e6c5-4ba2-95aa-2d35b442b118) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736) |
Attack Pattern |
1 |
| Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
Dynamic-link Library Injection - T1055.001 (f4599aa0-4f85-4a32-80ea-fc39dc965945) |
Attack Pattern |
1 |
| Tool - T1588.002 (a2fdce72-04b2-409a-ac10-cc1695f4fce0) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
Non-Application Layer Protocol - T1095 (c21d5a77-d422-4a69-acd7-2c53c1faa34b) |
Attack Pattern |
1 |
| Native API - T1106 (391d824f-0ef1-47a0-b0ee-c59a75e27670) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Screen Capture - T1113 (0259baeb-9f63-4c69-bf10-eb038c390688) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Python - T1059.006 (cc3502b5-30cc-4473-ad48-42d51a6ef6d1) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62) |
Attack Pattern |
1 |
| Deobfuscate/Decode Files or Information - T1140 (3ccef7ae-cb5e-48f6-8302-897105fbf55c) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Archive Collected Data - T1560 (53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Windows Credential Manager - T1555.004 (d336b553-5da9-46ca-98a8-0b23f49fb447) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| LSASS Memory - T1003.001 (65f2d882-3f41-4d48-8a06-29af77ec9f90) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| System Network Configuration Discovery - T1016 (707399d6-ab3e-4963-9315-d9d3818cd6a0) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Email Account - T1087.003 (4bc31b94-045b-4752-8920-aebaebdb6470) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) |
Attack Pattern |
1 |
| Non-Standard Encoding - T1132.002 (d467bc38-284b-4a00-96ac-125f447799fc) |
Attack Pattern |
Lizar - S0681 (f74a5069-015d-4404-83ad-5ca01056c0dc) |
Malware |
1 |
| Security Software Discovery - T1518.001 (cba37adb-d6fb-4610-b069-dd04c0643384) |
Attack Pattern |
Software Discovery - T1518 (e3b6daca-e963-4a69-aee6-ed4fd653ad58) |
Attack Pattern |
2 |
| Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) |
Attack Pattern |
Portable Executable Injection - T1055.002 (806a49c4-970d-43f9-9acc-ac0ee11e6662) |
Attack Pattern |
2 |
| Credentials from Password Stores - T1555 (3fc9b85a-2862-4363-a64d-d692e3ffbee0) |
Attack Pattern |
Credentials from Web Browsers - T1555.003 (58a3e6aa-4453-4cc8-a51f-4befe80b31a8) |
Attack Pattern |
2 |
| Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) |
Attack Pattern |
PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736) |
Attack Pattern |
2 |
| Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) |
Attack Pattern |
Dynamic-link Library Injection - T1055.001 (f4599aa0-4f85-4a32-80ea-fc39dc965945) |
Attack Pattern |
2 |
| Tool - T1588.002 (a2fdce72-04b2-409a-ac10-cc1695f4fce0) |
Attack Pattern |
Obtain Capabilities - T1588 (ce0687a0-e692-4b77-964a-0784a8e54ff1) |
Attack Pattern |
2 |
| Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) |
Attack Pattern |
Python - T1059.006 (cc3502b5-30cc-4473-ad48-42d51a6ef6d1) |
Attack Pattern |
2 |
| Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) |
Attack Pattern |
Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62) |
Attack Pattern |
2 |
| Windows Credential Manager - T1555.004 (d336b553-5da9-46ca-98a8-0b23f49fb447) |
Attack Pattern |
Credentials from Password Stores - T1555 (3fc9b85a-2862-4363-a64d-d692e3ffbee0) |
Attack Pattern |
2 |
| LSASS Memory - T1003.001 (65f2d882-3f41-4d48-8a06-29af77ec9f90) |
Attack Pattern |
OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22) |
Attack Pattern |
2 |
| Email Account - T1087.003 (4bc31b94-045b-4752-8920-aebaebdb6470) |
Attack Pattern |
Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) |
Attack Pattern |
2 |
| Data Encoding - T1132 (cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f) |
Attack Pattern |
Non-Standard Encoding - T1132.002 (d467bc38-284b-4a00-96ac-125f447799fc) |
Attack Pattern |
2 |