Salten Fisk
@saltenfisk0 followers183 downloads67 copies19 likes1,131 views
11 detections
Filters
Last updated
All Time
Detection languages
7
4
Categories
4
3
2
2
2
Platforms
7
2
1
1
1
Products / Services
5
2
1
1
1
MITRE Techniques
5
4
3
3
2
Detects mshta.exe executing with command-line arguments containing 'http', which is indicative of mshta.exe being used to download and execute remote HTA files or scripts. This procedure is known to be used in ClickFix attacks where threat actors use fake Captcha portals to download malware payloads.
Page 2 of 2