T1112
Modify Registry
discovered 2026-07-08Telegram RAT exit handler deletes HKLM Windows\Installer DisableLogging/DisableMSI registry values.
View on MITRE ATT&CKTelegram RAT exit handler deletes HKLM Windows\Installer DisableLogging/DisableMSI registry values.
View on MITRE ATT&CKSafeDep keeps analytics anonymous and cookie-free until you opt in. Accepting helps us understand product usage and improve your experience. Privacy Policy
Choose what you share. You can change this anytime from the footer.
