Skip to content

Hide Navigation Hide TOC

Suspicious Parent Double Extension File Execution (5e6a80c8-2d45-4633-9ef4-fa2671a39c5c)

Detect execution of suspicious double extension files in ParentCommandLine

Cluster A Galaxy A Cluster B Galaxy B Level
Suspicious Parent Double Extension File Execution (5e6a80c8-2d45-4633-9ef4-fa2671a39c5c) Sigma-Rules Double File Extension - T1036.007 (11f29a39-0942-4d62-92b6-fe236cf3066e) Attack Pattern 1
Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0) Attack Pattern Double File Extension - T1036.007 (11f29a39-0942-4d62-92b6-fe236cf3066e) Attack Pattern 2