Software
software:malware
Malicious software found in the client environment and analyzed as part of the response.
Malicious software found in the client environment and analyzed as part of the response.
“they were able to identify that there was an active threat act in that client’s environment”
“the malware found in the network matched exactly the same malware”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | ATTRIBUTED_TO | state-sponsored group | Attributed | 11 |
| outgoing | AFFECTS | endpoint | Derived | 11 |
malware ATTRIBUTED_TO state-sponsored group
The malware found in the network matched malware described in a published report that linked it to the APT group.
Attributed Confidence 93% · Jack Rhysider EP 11 Details
“the malware found in the network matched exactly the same malware that someone had published in a report which linked it back to that APT group”
The malware was observed running on and being updated across endpoints in the client environment.
Derived Confidence 89% · Andrew EP 11 Details
“making sure that their malware is still running and deploying newer versions”
“on these end-points”