Reda BELHAJ
@ReadytoBCompletionist
0 followers39 downloads1 copy0 likes35 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Categories
1
1
Platforms
1
MITRE Techniques
1
1
1
1
1
Detects instances where NodeJS (node.exe) spawns the Command Processor (cmd.exe) to execute the 'reg add' command. This behavior is a known persistence technique used by the NodeInitRAT backdoor, associated with the Mocha Manakin threat actor, to add a run key to the Windows Registry.
