Ernesto Lleras
@ernesto0 followers23 downloads2 copies3 likes87 views
2 detections
Filters
Last updated
All Time
Detection languages
2
Categories
2
1
1
1
Platforms
2
Products / Services
1
1
MITRE Techniques
2
1
1
1
1
Detects the creation of a scheduled task designed to execute a VBScript from a temporary or user-specific directory. This technique is used by the Dead#Vax malware to establish persistence with a layer of indirection, avoiding direct PowerShell execution from the task itself.
Detects a PowerShell command used to read its own batch script container (e.g., rEgX.cmd) to find and extract a hidden, encoded payload. This self-parsing technique is a core feature of the Dead#Vax malware.