Node.js Executing Update.js
Detects the execution of 'node.exe' with 'Update.js' in its command line. This pattern is associated with the primary dropper for the 'Lorem Ipsum' malware.
Microsoft Sentinel (KQL)

Detects the execution of 'node.exe' with 'Update.js' in its command line. This pattern is associated with the primary dropper for the 'Lorem Ipsum' malware.

Already have an account?