ATT&CKReferencesThreatGeek Derusbi Converge

ThreatGeek Derusbi Converge

Fidelis Threat Research Team. (2016, May 2). Turbo Twist: Two 64-bit Derusbi Strains Converge. Retrieved August 16, 2018.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples1

TechniqueUsed byProcedure example
T1218.010
Regsvr32
MalwareDerusbi

Derusbi variants have been seen that use Registry persistence to proxy execution through regsvr32.exe.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.