Persistence Via Hhctrl.ocx

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•2

Detects when an attacker modifies the registry value of the "hhctrl" to point to a custom binary