Security research

redcanary.com/blog/raspberry-robin

https://redcanary.com/blog/raspberry-robin/
Published on
redcanary.com

ATT&CK techniques those detections carry

  • T1218.008Odbcconf
  • T1218.011Rundll32
Open the original

5 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
Suspicious ShellExec_RunDLL Call Via OrdinalHigh
Suspicious Usage Of ShellExec_RunDLLHigh
Rundll32 Spawned Via Explorer.EXEMedium
New DLL Registered Via Odbcconf.EXEMedium
Suspicious Network Connection Binary No CommandLineHigh

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice