Skip to content
Threat Feed
Subscribe

Tag

Process-Anomaly

1 brief RSS
high threat

System File Execution Location Anomaly

This brief describes the detection of Windows system binaries executing from uncommon locations, a defense evasion and stealth technique employed by various threat actors including Lazarus Group and Sidewinder APT, indicating potential malicious activity on an endpoint.

Lazarus Group +5 defense-evasion stealth execution windows process-anomaly
1r 4t