shieldkda.blogg.se

Tool_Type = "exploitation information-gathering remote-access"ĭescription = "Detects obfuscated and deobfuscated interactive PHP webshell samples" Malware_Type = "backdoor remote-access-trojan webshell"

rule CISA_10443863_01 : backdoor remote_access_trojan webshell exploitation information_gathering remote_access accesses_remote_machines anti_debugging captures_system_state_data controls_local_machine compromises_data_availability compromises_data_integrity fingerprints_host installs_other_componentsĬapabilities = "accesses-remote-machines anti-debugging captures-system-state-data controls-local-machine compromises-data-availability compromises-data-integrity fingerprints-host installs-other-components".