Soniccrypt File Creation And Scheduled Task Execution

Tim Peck@timpeck

•updated Oct 14, 2025•0•64

Detects a two-stage behavior characteristic of the SonicCrypt crypter: 1) A process creates a suspicious executable in a Windows system directory. 2) The newly created executable is then launched by the Windows Task Scheduler.