Suspicious Registry Queries and Scheduled Task Creation - LummaC2

Kaung Khant Ko@kaungkhantko

•updated Sep 9, 2025•6•1•130

Detects registry queries for software inventory and browser settings as well as suspicious scheduled task creation, techniques observed in LummaC2 malware campaigns. Registry queries target installed software and browser preferences for reconnaissance (T1012). Scheduled tasks ensure persistence (T1053.005)