criticaltestEmerging Threat
Goofy Guineapig Backdoor Service Creation
Detects service creation persistence used by the Goofy Guineapig backdoor
windowssystem
2023-05-15
Emerging Threats
Malware2021
Goofy Guineapig
5Rules
1References
1Folders
2023-05-15Latest
Summary
Goofy Guineapig is tracked here as a malware family or toolset with 5 Sigma detections spanning 2021. Coverage centers on windows / process_creation, proxy, windows / file_event +1.
Related Detections
Search this threathightestEmerging Threat
Potential Goofy Guineapig GoolgeUpdate Process Anomaly
Detects "GoogleUpdate.exe" spawning a new instance of itself in an uncommon location as seen used by the Goofy Guineapig backdoor
windowsprocess_creation
2023-05-15
hightestEmerging Threat
Goofy Guineapig Backdoor IOC
Detects malicious indicators seen used by the Goofy Guineapig malware
windowsfile_event
2023-05-14
hightestEmerging Threat
Goofy Guineapig Backdoor Potential C2 Communication
Detects potential C2 communication related to Goofy Guineapig backdoor
Generalproxy
2023-05-14
hightestEmerging Threat
Potential Goofy Guineapig Backdoor Activity
Detects a specific broken command that was used by Goofy-Guineapig as described by the NCSC report.
windowsprocess_creation
2023-05-14
References