Deep Dive into Snow Flurry campaign: Edgecution Persistence and the "Headless Process Clean Up"
← Back to Labs
← Volver a Labs
Medium
Campaign, CyberCrime, Malware
Discovery, Execution
EDR, Sysmon, Windows

Deep Dive into Snow Flurry campaign: Edgecution Persistence and the "Headless Process Clean Up"

The Snow Flurry campaign leverages Edgecution persistence through scheduled tasks. It features an automated "Headless Process Clean Up" mechanism to terminate background Edge instances lacking CoreUIComponents.dll for stealth.

labs correlati

Contacts

Get in touch with us

Contact Us
chevron-right