Privilege Escalation
T1055 injection_failed: The attempt to inject into a process has failed
Defense Evasion
T1497 evasion_printers: Attempts to detect Sandbox by exploring existing printers
T1055 injection_failed: The attempt to inject into a process has failed
Credential Access
T1555.004 windows_credential_manager: Acquire credentials from the Windows Credential Manager
Discovery
T1497 evasion_printers: Attempts to detect Sandbox by exploring existing printers
Other
yara_rules: Static rules
suspicious_network_port: Performs TCP or UDP request to non-standard port
test_check_service: Starts services
writes_data: Writes big amount of data to disk