Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Emerging Threats
    Malware2021

    Moriya Rootkit

    1Rules
    1References
    1Folders
    2023-05-05Latest
    Summary

    Moriya Rootkit is tracked here as a malware family or toolset with 1 Sigma detection spanning 2021. Coverage centers on windows / file_event.

    Related Detections
    Search this threat
    1 rulesInspect a rule without leaving your results.
    criticaltestEmerging Threat

    Moriya Rootkit File Created

    Detects the creation of a file named "MoriyaStreamWatchmen.sys" in a specific location. This filename was reported to be related to the Moriya rootkit as described in the securelist's Operation TunnelSnake report.

    windowsfile_event
    2023-05-05
    References
    1
    Resolving title…
    securelist.com