Malware2017

CosmicDuke

1Rules

1References

1Folders

2022-10-09Latest

Summary

CosmicDuke is tracked here as a malware family or toolset with 1 Sigma detection spanning 2017. Coverage centers on windows / security.

Related Detections

Search this threat

Emerging Threatcriticaltest

CosmicDuke Service Installation

Detects the installation of a service named "javamtsup" on the system. The CosmicDuke info stealer uses Windows services typically named "javamtsup" for persistence.

Windowssecurity

TA0004 · Privilege EscalationTA0002 · ExecutionTA0003 · PersistenceT1543.003 · Windows Service+2

Florian Roth (Nextron Systems)+2Mon Mar 272017

References

Resolving title…

blog.f-secure.com