DeepLoad Malware Scheduled Task Persistence

nomit vyas@xoxo

•updated Jun 25, 2026•0•0•4

Detects the creation of a scheduled task via schtasks.exe that involves PowerShell executing commands via IEX and IRM, a technique associated with the DeepLoad malware to maintain persistence.