Joe Security

@joesecurity
1 follower4,321 downloads3 copies0 likes835 views

112 detections

Schedule vb script From Appdata
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009
rundll32 run dll from internet
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009
powershell download file from internet and execute
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009
mshta downloads payload from pastebin
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009
Code injection in msbuild.exe by .scr file
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009
regsvr32.exe to execute a COM scriptlet from internet
Joe Security@joesecurity
avatar
Joe Security
1 year ago
009

Xmrig

Sigma
Detect Xmrig
Joe Security@joesecurity
avatar
Joe Security
1 year ago
008
Powershell load assembly from internet
Joe Security@joesecurity
avatar
Joe Security
1 year ago
008
Detect powershell download and load assembly
Joe Security@joesecurity
avatar
Joe Security
1 year ago
008
Schedule CERTUTIL windows binary
Joe Security@joesecurity
avatar
Joe Security
1 year ago
007
Page 4 of 12