Malware2021

Moriya Rootkit

1Rules

1References

1Folders

2023-05-05Latest

Summary

Moriya Rootkit is tracked here as a malware family or toolset with 1 Sigma detection spanning 2021. Coverage centers on windows / file_event.

Related Detections

Search this threat

Emerging Threatcriticaltest

Moriya Rootkit File Created

Detects the creation of a file named "MoriyaStreamWatchmen.sys" in a specific location. This filename was reported to be related to the Moriya rootkit as described in the securelist's Operation TunnelSnake report.

WindowsFile Event

TA0003 · PersistenceTA0004 · Privilege EscalationT1543.003 · Windows Servicedetection.emerging-threats

Bhabesh RajThu May 062021

References

Resolving title…

securelist.com