SymonLoader
Description
(Palo Alto) When executed, the loader starts monitoring storage device changes on a compromised machine. If SymonLoader detects the targeted type of secure USB drive, it attempts to access the storage through the device driver corresponding to the secure USB and checks for strings specific to one type of secure USB in the drive information fields. Then, it accesses a predefined location of the storage on the USB and extracts an unknown PE file.
Names
| Name |
|---|
| SymonLoader |
Category
Malware
Type
- Loader
Information
Alienvault Otx
Other Information
Uuid
fbb29314-33cd-4170-9df9-801828cc3742
Last Card Change
2020-04-20