| ID | B0044 |
| Objective(s) | Execution |
| Related ATT&CK Techniques | None |
| Version | 2.1 |
| Created | 20 April 2021 |
| Last Modified | 12 June 2023 |
Software may require certain run-time or library dependencies consistent with normal software development and deployment. For example, software may require the presence of a .NET or Java runtime or to be run by a webserver that supports PHP. Unlike in Conditional Execution (B0025), this dependency is not because of an explicit check coded into the malware by the author.
| Name | Date | Method | Description |
|---|---|---|---|
| Adwind jRAT | 2019 | -- | Adwind jRAT uses standard Java commands to mask its behavior. [1] |
[1] https://www.menlosecurity.com/blog/hiding-in-plain-sight-new-adwind-jrat-variant-uses-normal-java-commands-to-mask-its-behavior/