KRSID Ransomware Deployment via UBPPatch.Psh Downloading Update.Lst
Detects malicious activity involving the HTS software update mechanism, where the legitimate updater or patch processes are leveraged to download and execute the HTSPnew.exe ransomware payload.
Sigma

