Skip to content

Hide Navigation Hide TOC

HackTool - PCHunter Execution (fca949cc-79ca-446e-8064-01aa7e52ece5)

Detects suspicious use of PCHunter, a tool like Process Hacker to view and manipulate processes, kernel options and other low level stuff

Cluster A Galaxy A Cluster B Galaxy B Level
System Information Discovery - T1082 (354a7f88-63fb-41b5-a801-ce3b377b36f1) Attack Pattern HackTool - PCHunter Execution (fca949cc-79ca-446e-8064-01aa7e52ece5) Sigma-Rules 1
HackTool - PCHunter Execution (fca949cc-79ca-446e-8064-01aa7e52ece5) Sigma-Rules File and Directory Discovery - T1083 (7bc57495-ea59-4380-be31-a64af124ef18) Attack Pattern 1
HackTool - PCHunter Execution (fca949cc-79ca-446e-8064-01aa7e52ece5) Sigma-Rules System Service Discovery - T1007 (322bad5a-1c49-4d23-ab79-76d641794afa) Attack Pattern 1
Query Registry - T1012 (c32f7008-9fea-41f7-8366-5eb9b74bd896) Attack Pattern HackTool - PCHunter Execution (fca949cc-79ca-446e-8064-01aa7e52ece5) Sigma-Rules 1
Process Discovery - T1057 (8f4a33ec-8b1f-4b80-a2f6-642b2e479580) Attack Pattern HackTool - PCHunter Execution (fca949cc-79ca-446e-8064-01aa7e52ece5) Sigma-Rules 1