Skip to content

Hide Navigation Hide TOC

Suspicious Space Characters in TypedPaths Registry Path - FileFix (8f2a5c3d-9e4b-4a7c-8d1f-2e5a6b9c3d7e)

Detects the occurrence of numerous space characters in TypedPaths registry paths, which may indicate execution via phishing lures using file-fix techniques to hide malicious commands.

Cluster A Galaxy A Cluster B Galaxy B Level
Command Obfuscation - T1027.010 (d511a6f6-4a33-41d5-bc95-c343875d1377) Attack Pattern Suspicious Space Characters in TypedPaths Registry Path - FileFix (8f2a5c3d-9e4b-4a7c-8d1f-2e5a6b9c3d7e) Sigma-Rules 1
Malicious Copy and Paste - T1204.004 (e261a979-f354-41a8-963e-6cadac27c4bf) Attack Pattern Suspicious Space Characters in TypedPaths Registry Path - FileFix (8f2a5c3d-9e4b-4a7c-8d1f-2e5a6b9c3d7e) Sigma-Rules 1
Command Obfuscation - T1027.010 (d511a6f6-4a33-41d5-bc95-c343875d1377) Attack Pattern Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a) Attack Pattern 2
Malicious Copy and Paste - T1204.004 (e261a979-f354-41a8-963e-6cadac27c4bf) Attack Pattern User Execution - T1204 (8c32eb4d-805f-4fc5-bf60-c4d476c131b5) Attack Pattern 2