hightestEmerging Threat
Small Sieve Malware Registry Persistence
Detects registry value with specific intentional typo and strings seen used by the Small Sieve malware
windowsregistry_set
2023-08-17
Small Sieve is tracked here as a malware family or toolset with 4 Sigma detections spanning 2021. Coverage centers on proxy, windows / file_event, windows / process_creation +1.
Detects registry value with specific intentional typo and strings seen used by the Small Sieve malware
Detects specific command line argument being passed to a binary as seen being used by the malware Small Sieve.
Detects filename indicators that contain a specific typo seen used by the Small Sieve malware.
Detects potential C2 communication related to Small Sieve malware