MITRE ATT&CK technique · stealth, Discovery

`T1622` Debugger Evasion

Adversaries may employ various means to detect and avoid debuggers. Debuggers are typically used by defenders to trace and/or analyze the execution of potential malware payloads.(Citation: ProcessHacker Github) Debugger evasion may include changing behaviors based on the results of the checks for the presence of artifacts indicative of a debugged environment. Similar to [Virtualization/Sandbox…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

Lumma Stealer

Sigma rules to hunt it

PUA - Process Hacker Executionmediumtest · windows

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.