Actor2021

SOURGUM

1Rules

3References

1Folders

2022-10-09Latest

Summary

SOURGUM is tracked here as a threat actor, intrusion set, or campaign with 1 Sigma detection spanning 2021. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threathightest

SOURGUM Actor Behaviours

Suspicious behaviours related to an actor tracked by Microsoft as SOURGUM

WindowsProcess Creation

T1546 · Event Triggered ExecutionT1546.015 · Component Object Model HijackingTA0003 · PersistenceTA0004 · Privilege Escalation+1

MSTIC+1Tue Jun 152021

References