UNAPIMON
Description
(Trend Micro) Looking at the behavior of UNAPIMON and how it was used in the attack, we can infer that its primary purpose is to unhook critical API functions in any child process. For environments that implement API monitoring through hooking such as sandboxing systems, UNAPIMON will prevent child processes from being monitored. Thus, this malware can allow any malicious child process to be executed with its behavior undetected.
Names
| Name |
|---|
| UNAPIMON |
Category
Malware
Type
- Loader
Information
Other Information
Uuid
7716ab81-7d3d-4bb6-a614-4d51a273bb3c
Last Card Change
2024-04-22