Skip to content

Hide Navigation Hide TOC

Potential Binary Impersonating Sysinternals Tools (7cce6fc8-a07f-4d84-a53e-96e1879843c9)

Detects binaries that use the same name as legitimate sysinternals tools to evade detection

Cluster A Galaxy A Cluster B Galaxy B Level
Potential Binary Impersonating Sysinternals Tools (7cce6fc8-a07f-4d84-a53e-96e1879843c9) Sigma-Rules Indirect Command Execution - T1202 (3b0e52ce-517a-4614-a523-1bd5deef6c5e) Attack Pattern 1
Potential Binary Impersonating Sysinternals Tools (7cce6fc8-a07f-4d84-a53e-96e1879843c9) Sigma-Rules System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) Attack Pattern 1