CodePage Modification Via MODE.COM

SigmaHQ Detections@sigmaHQ

•updated Dec 1, 2024•0•20

Detects a CodePage modification using the "mode.com" utility. This behavior has been used by threat actors behind Dharma ransomware.