Joe Security
@joesecurity1 follower4,321 downloads3 copies0 likes832 views
112 detections
Filters
Last updated
All Time
Detection languages
112
Categories
89
3
Platforms
112
Products / Services
20
MITRE Techniques
10
6
3
3
2
msiexec download and execute
Execute dll with txt extension from temp location
Get2 Downloader
Sigma
Get2 downloader associated with TA505
AntiVM
Sigma
Detect virtual environment "VirtualBox|VMware|KVM|HVM"
Access payload via nslookup txt record
powershell launches WScript, WScript executes file from startup
Wmic Launch Msiexec
Sigma
Wmic launch msiexec to download file from internet
Wake-On-Lan
Sigma
Sending magic Wake-On-Lan packet on port 7
Search for Antivirus process
Page 3 of 12