Alternative names (4)
isPersistent • persistence • persistenceMethod • supportsPersistenceRandom triples
| Subject | Object |
|---|---|
| gptkb:BlackEnergy_3 | gptkb:Windows_registry |
| gptkb:SofacyADVSTORESHELL | registry modification |
| gptkb:Pinkslipbot | DLL injection |
| gptkb:QuasarRAT | registry modification |
| gptkb:Zegost_malware | scheduled tasks |
| gptkb:Zebrocy_malware | scheduled task |
| gptkb:Quasar_RAT | registry modification |
| gptkb:ScarCruft_backdoor | registry modification |
| gptkb:Sarin_(nerve_agent) | low (evaporates quickly) |
| gptkb:Zebrocy_malware | registry modification |
| gptkb:VX_(nerve_agent) | high |
| gptkb:ObliqueRAT | Registry modification |
| gptkb:Korplug | scheduled tasks |
| gptkb:Regin_malware | encrypted payloads |
| gptkb:LightNeuron | Exchange Transport Agent |
| gptkb:Redis | RDB snapshots |
| gptkb:GrayFish_malware | gptkb:Windows_registry |
| gptkb:ShadowPad | registry modification |
| gptkb:Qubes_templateVM | yes |
| gptkb:PFDA | true |