Joe Security
@joesecurity1 follower4,321 downloads3 copies0 likes835 views
112 detections
Filters
Last updated
All Time
Detection languages
112
Categories
89
3
Platforms
112
Products / Services
20
MITRE Techniques
10
6
3
3
2
Registering wscript to autostart run key for dropped js/vbs
register jar in run key
powershell IEX((new-object net.webclient).downloadstring( string in base64 form
Powershell download file from base64 url
MSBuild execute suspicous task
File dropped by EQNEDT32.EXE(CVE-2017-11882)
Wmic download via msiexec
powershell with enco parameter launched by winword / excel / powerpoint
Powershell download file and shellexecute
Page 5 of 12