T1587.001Resource Development
Malware
Adversaries may develop malware and malware components that can be used during targeting. Building malicious software can include the development of payloads, droppers, post-compromise tools, backdoors (including backdoored images), packers, C2 protocols, and the creation of infected removable media. Adversaries may develop malware to support their operations, creating a means for maintaining…
CVEs0
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
Detections
11 Sigma rules tagged T1587.001MalwareT1587.00111 general rules
- ProxyLogon MSExchange OabVirtualDirectorycriticaltest
- Conti Volume Shadow Listinghightest
- Formbook Process Creationhightest
- Mustang Panda Dropperhightest
- Potential Privilege Escalation To LOCAL SYSTEMhightest
- Potential PsExec Remote Executionhightest
- PsExec/PAExec Escalation to LOCAL SYSTEMhightest
- PUA - CsExec Executionhightest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Malware
0 CVEs, by priority. Each link shows its badge.No CVEs are linked to this technique yet.