Joe Security

@joesecurity
1 follower4,321 downloads3 copies0 likes832 views

112 detections

Schedule vb script From Appdata
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009
rundll32 run dll from internet
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009
powershell download file from internet and execute
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009
mshta downloads payload from pastebin
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009
regsvr32.exe to execute a COM scriptlet from internet
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009

Xmrig

Sigma
Detect Xmrig
Joe Security@joesecurity
avatar
Joe Security
1 year ago
008
Powershell load assembly from internet
Joe Security@joesecurity
avatar
Joe Security
1 year ago
008
Code injection in msbuild.exe by .scr file
Joe Security@joesecurity
avatar
Joe Security
1 year ago
008
Schedule CERTUTIL windows binary
Joe Security@joesecurity
avatar
Joe Security
1 year ago
007
Registering wscript to autostart run key for dropped js/vbs
Joe Security@joesecurity
avatar
Joe Security
1 year ago
007
Page 4 of 12