SYMBOLCOMMON_NAMEaka. SYNONYMS
win.deimos (Back to overview)

Deimos


Described by Elastic as being associated with win.jupyter, and being used in the context of initial access, persistence, and C&C capabilities.

References
2021-10-12ElasticElastic Security Intelligence & Analytics Team
@online{team:20211012:going:5ac7c9d, author = {Elastic Security Intelligence & Analytics Team}, title = {{Going Coast to Coast - Climbing the Pyramid with the Deimos Implant}}, date = {2021-10-12}, organization = {Elastic}, url = {https://www.elastic.co/blog/going-coast-to-coast-climbing-the-pyramid-with-the-deimos-implant}, language = {English}, urldate = {2021-10-26} } Going Coast to Coast - Climbing the Pyramid with the Deimos Implant
Deimos

There is no Yara-Signature yet.