Loading malware…
1 CVE Mallory has correlated with this family across public research and vendor advisories. Each card links to the full Mallory page for that vulnerability.
2 distinct threat actors Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.
SELFMAKE (SPIDERPIG Loader) • PE on-memory loader, internally called as “selfmake” according to its class name
SELFMAKE (SPIDERPIG Loader) • PE on-memory loader, internally called as “selfmake” according to its class name
3 distinct techniques documented for this family, organized by ATT&CK tactic.
MITRE ATT&CK Tactic Technique ID Procedure Initial Access Exploit Public-Facing Application T1190 Abuse ProxyLogon
MITRE ATT&CK ... Execution User Execution: Malicious File T1204.002 User enables macro or run malicious program
MITRE ATT&CK ... Persistence Boot or Logon Initialization Scripts: Startup Items T1037.005 BUSYICE/SLEFMAKE is executed through startup
MITRE ATT&CK ... Persistence Boot or Logon Initialization Scripts: Startup Items T1037.005 BUSYICE/SLEFMAKE is executed through startup
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.