All Detections

ClickFix - Clipboard Execution of Matanbuchus Loader (T1059.001)

avatar
Ibrahim Saud@tektrix
updated Jun 23, 2026003

Detects the ClickFix clipboard execution (Get-Clipboard or iex) triggered from explorer.exe, specifically leading to the download of the Matanbuchus DLL.

Microsoft Sentinel (KQL)