EVEREST
ATT&CK Techniques (17)
T1027
Obfuscated Files or Information
Stealth
T1027.007
Obfuscated Files or Information: Dynamic API Resolution
Stealth
T1078.003
Valid Accounts: Local Accounts
Stealth
T1112
Modify Registry
Stealth
T1140
Deobfuscate/Decode Files or Information
Stealth
T1480
Execution Guardrails
Stealth
T1564
Hide Artifacts
Stealth
T1622
Debugger Evasion
Stealth
T1018
Remote System Discovery
Discovery
T1135
Network Share Discovery
Discovery
T1518.001
Software Discovery: Security Software Discovery
Discovery
T1614.001
System Location Discovery: System Language Discovery
Discovery
T1021.002
Remote Services: SMB/Windows Admin Shares
Lateral Movement
T1071.001
Application Layer Protocol: Web Protocols
Command and Control
T1486
Data Encrypted for Impact
Impact
T1489
Service Stop
Impact
T1490
Inhibit System Recovery
Impact