LausivLoader MicrosoftEdgeUpdateTaskCore Scheduled Task Persistence

Ibrahim Saud@tektrix

•updated 15 days ago•0•0•3

Detects the creation of a scheduled task named 'MicrosoftEdgeUpdateTaskCore' that is configured to execute a malicious JavaScript file named 'PhotoStudio.js' using wscript.exe with silent flags. This behavior is indicative of persistence mechanisms employed by the LausivLoader malware family.