OpnKey Ransomware db.bat Execution via cmd.exe from Temp

Subhankar H@Andrewsec57

•updated 25 days ago•1•0•2

Detects the execution of batch files named 'db.bat' or 'adb.bat' from the Windows User Temp directory using cmd.exe. This activity is a known indicator of the OpnKey ransomware, which utilizes these scripts to facilitate its operations.