APT CurlyCOMrades MucorAgent Aug25
Detects MucorAgent, a multi-stage .NET backdoor used by the Curly COMrades threat actor. It uses COM hijacking for persistence and executes AES-encrypted PowerShell scripts.
YARA
Detects MucorAgent, a multi-stage .NET backdoor used by the Curly COMrades threat actor. It uses COM hijacking for persistence and executes AES-encrypted PowerShell scripts.
Already have an account?