• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    DragonForce Locker CLI Preparation Flags (-m/-p/-log/-nomutex)

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Ibrahim Saud@tektrix
    •updated Sep 18, 2026•1•0•3

    Detects processes executed with specific command line arguments often associated with malicious tools or malware, such as mutex bypass flags, logging configuration, or arbitrary size parameters that are not related to help or usage documentation.

    Microsoft Sentinel (KQL)

    Tags

    T1059 - Command and Scripting InterpreterTA0002 - ExecutionProcess CreationCommand ExecutionWindowsWindows Defender Atpkql

    Found in

    • Analysis of DragonForce Windows Ransomware LockerLast updated Sep 9, 2026
    • Analysis of DragonForce Windows Ransomware LockerLast updated Sep 9, 2026
    • Analysis of DragonForce Windows Ransomware LockerLast updated Sep 9, 2026
    • Analysis of DragonForce Windows Ransomware LockerLast updated Sep 9, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?