Payouts King Direct Syscall AV/EDR Bypass via Known Hash and Mozilla ElevateTask

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

Detects activity associated with the Payouts King ransomware, including identified malicious binary hashes, the creation of Mozilla-themed scheduled tasks for persistence, and execution via command line to elevate tasks to SYSTEM privilege.