Joe Security
@joesecurity1 follower4,321 downloads3 copies0 likes832 views
112 detections
Filters
Last updated
All Time
Detection languages
112
Categories
89
3
Platforms
112
Products / Services
20
MITRE Techniques
10
6
3
3
2
Schedule binary from dotnet directory
Run temp file via regsvr32
Detect rundll32 launch mshta and run script from internet
Run CertUtil from suspicious location
Rename system process and copy to suspicious location
Renamed MSHTA launching html
Register dll at autostart location via regsvr32
RegAsm connects to smtp port
Powershell launch wmic via class
Powershell execute code from registry
Page 9 of 12