Tag
medium
advisory
Windows Time-Based Evasion via Choice Exec
2 rules 1 TTPDetection of choice.exe used in batch files for time-based evasion, a technique observed in SnakeKeylogger malware, indicating potential stealthy code execution and persistence.
Windows +3
time-based-evasion
malware
persistence
defense-evasion
2r
1t
high
threat
Windows Time-Based Evasion via Ping Delay
2 rules 1 TTPThis analytic detects potentially malicious processes initiating a ping delay using an invalid IP address, a tactic used by malware like NJRAT to evade detection by delaying actions.
Windows
NJRAT
time-based-evasion
2r
1t