Behaviors
List of software behaviors discovered with static code analysis.
Disables services related to common security products, firewalls or anti-virus solutions. (x1)
evasion
Impersonates services related to common security products, firewalls or anti-virus solutions. (x1)
stealth
Retrieves the name of the user associated with the process. (x9)
search
Deletes the value of a registry key. (x5)
registry
Requests permission to open other processes. (x3)
permissions
Deletes files in Windows system directories. (x9)
file
Uses a Python script interpreter. (x1)
execution
Detects common security products, firewalls or anti-virus solutions. (x1)
evasion
Tampers with services related to common security products, firewalls or anti-virus solutions. (x1)
evasion
Detects VMWare related virtualized environments. (x3)
evasion