Suspicious Mshta Msixbundle Execution
Detects the execution of mshta.exe attempting to download and execute a remote payload masquerading as an msixbundle file.
YARA-L

Detects the execution of mshta.exe attempting to download and execute a remote payload masquerading as an msixbundle file.

Already have an account?