Kimsuky/XWorm Suspicious Archive Extraction
Detects the execution of the UnRAR utility with a password to extract an archive. This technique is used by threat actors like the Kimsuky group and XWorm RAT to deliver malicious payloads.
Sigma
Detects the execution of the UnRAR utility with a password to extract an archive. This technique is used by threat actors like the Kimsuky group and XWorm RAT to deliver malicious payloads.
Already have an account?