Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

HackTool - CACTUSTORCH Remote Thread Creation

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•1

Detects remote thread creation from CACTUSTORCH as described in references.

Sigma

Tags

TA0004 - Privilege Escalation TA0002 - Execution TA0005 - Stealth T1055.012 - Process Hollowing T1059.005 - Visual Basic T1059.007 - JavaScript T1218.005 - Mshta Process Remote Thread Creation Windows Windows Sysmonattack.privilege-escalationattack.executionattack.stealthattack.t1055.012attack.t1059.005attack.t1059.007attack.t1218.005

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?