ChainShell Installer Script Detection
Detects references to the ChainShell installer script 'VfZUSQi6oerKau.js' within process command lines. This script is associated with the MuddyWater threat group.
Microsoft Sentinel (KQL)

Detects references to the ChainShell installer script 'VfZUSQi6oerKau.js' within process command lines. This script is associated with the MuddyWater threat group.

Already have an account?