ID OB0012 Created 1 August 2019 Last Modified 27 September 2023 Persistence Today I discovered this {https://github.com/MBCProject/mbc-markdown/blob/3559ac6c87a7e8ea9a1fa01bf1155032d7fcdcac/persistence/shutdown-event.md] <this rep. is likely being used in this malware. I haven't ever used Git so I need to look through this more. Do not run this. Behaviors that enable malware to remain on a system regardless of system events, such as reboots. Bootkit F0013 Component Firmware F0009 Hide Artifacts E1564 Hidden Files and Directories F0005 Hijack Execution Flow F0015 Install Insecure or Malicious Configuration B0047 Kernel Modules and Extensions F0010 Malicious Network Driver B0026 Modify Existing Service F0011 Modify Registry E1112 Registry Run Keys / Startup Folder F0012 Ingress Tool Transfer E1105 Shutdown Event B0035