malware-analyst

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly describes persistence and system-level techniques that modify host state (e.g., Registry Run keys, scheduled tasks, CreateService/sc.exe, MBR/VBR modifications) and instructs executing samples, which could push an agent to perform disruptive or privileged changes to the machine.