Suspicious Standard Tool Injection And Lateral Movement

X__Junior

Detects suspicious activity where payloads are injected into legit windows executables. The injected module facilitate lateral movement, execute commands on remote endpoints, and exfiltrate data. This behavior is associated with the SquidDoor backdoor and could be used by diffrent actors/malwares.

2025-02-27 00:00:00

None

fb2761e5-e251-4011-9cfc-c2d19278ee6f

attack.discovery attack.t1082

Nextron Sigma feed only (private)