Mastra NPM - setup.cjs Dropper Execution to Network Exfil
Correlates the execution of the initial dropper script (setup.cjs) to the hardcoded C2 IPs, indicating potential compromise by the Mastra NPM malware.
Microsoft Sentinel (KQL)

Correlates the execution of the initial dropper script (setup.cjs) to the hardcoded C2 IPs, indicating potential compromise by the Mastra NPM malware.

Already have an account?