ID	B0044
Objective(s)	Execution
Related ATT&CK Techniques	None
Version	2.2
Created	20 April 2021
Last Modified	29 April 2024

Execution Dependency

Software may require certain run-time or library dependencies consistent with normal software development and deployment. For example, software may require the presence of a .NET or Java runtime or to be run by a webserver that supports PHP. Unlike in Conditional Execution (B0025), this dependency is not because of an explicit check coded into the malware by the author.

Use in Malware

Name	Date	Method	Description
Adwind jRAT	2019	--	Adwind jRAT uses standard Java commands to mask its behavior. [1]

References

[1] https://www.menlosecurity.com/blog/hiding-in-plain-sight-new-adwind-jrat-variant-uses-normal-java-commands-to-mask-its-behavior/