Payouts King CRC-Obfuscated Command-Line Arguments and Anti-Analysis Flags
Detects execution patterns associated with Payouts King malware, characterized by specific command-line arguments, obfuscated execution flags, and execution from suspicious directories like Temp, AppData, or ProgramData. The rule uses a scoring mechanism to identify malicious behavior, including checking against known malicious SHA256 hashes.
Splunk (SPL)
