MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

add Autochk Rootkit as tool

Browse source
This commit is contained in:
Deborah Servili 2020-01-15 13:41:53 +01:00
parent bfcc867ee6
commit 32961527aa
No known key found for this signature in database
GPG key ID: 7E3A832850D4D7D1
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
clusters/tool.json
View file

@ -7935,7 +7935,17 @@
},
"uuid": "ff692a4c-23ff-4e86-a03b-2de8d36bc98f",
"value": "Dustman"
},
{
"description": "This rootkit is a very simple. The name of the driver is “autochk.sys” - that’s why we’ll call it the autochk rootkit. The rootkit implements 2 functionalities: File Redirection and Network Connection Hiding.",
"meta": {
"refs": [
"https://repnz.github.io/posts/autochk-rootkit-analysis/"
]
},
"uuid": "4a60dc72-1ca0-4503-a635-96e119c5278d",
"value": "Autochk Rootkit"
}
],
"version": 130
"version": 131
}