ErsChk.exe DLL Side-Loading
Detects the execution of ErsChk.exe or command lines referencing Eraser.dll, which are specific artifacts used by Mustang Panda for malicious DLL side-loading to deploy PlugX.
Microsoft Sentinel (KQL)
Detects the execution of ErsChk.exe or command lines referencing Eraser.dll, which are specific artifacts used by Mustang Panda for malicious DLL side-loading to deploy PlugX.
Already have an account?