TerraStealerV2 TerraLogger Regsvr32 OCX Execution From Temp

Matt Brady@mbrady5299

•updated Jun 24, 2025•3•7•36

Detects the execution pattern of TerraStealerV2 and TerraLogger where regsvr32.exe loads an OCX file from a user's temporary directory, a known technique used by Golden Chickens.