MAL DarkCloud JS Downloader Aug25
Detects a malicious JavaScript file used in the DarkCloud campaign. This script uses WScript.Shell to execute an obfuscated PowerShell command, which downloads and executes a second-stage .NET payload.
YARA
Detects a malicious JavaScript file used in the DarkCloud campaign. This script uses WScript.Shell to execute an obfuscated PowerShell command, which downloads and executes a second-stage .NET payload.
Already have an account?