Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Uroboros Revisited: Tracing PatchGuard-Evasive Techniques Beyond SSDT Hooking
Threat Actors
Excerpt
Uroboros Revisited: Tracing PatchGuard-Evasive Techniques Beyond SSDT Hooking A status-based anti-analysis case study on NtProtectVirtualMemory interception in x64 Windows “To understand the immeasurable, the mind must be extraordinarily quiet, still.” — Jiddu Krishnamurti By Seeker( 李标明 ) China Independent Malware Analyst & Researcher Download the Full Report (PDF) Poem: It is one way I talk to myself Paper Boat Recalling my childhood,…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | ed785bbd156b61553aaf78b6f71fb37b | High | Score 64/100 | First seen |
IOC Relationship Graph
Building graph…