Suspicious Mshta.EXE Execution Patterns (e32f92d1-523e-49c3-9374-bdb13b46a3ba)
Detects suspicious mshta process execution patterns
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Native API - T1106 (391d824f-0ef1-47a0-b0ee-c59a75e27670) | Attack Pattern | Suspicious Mshta.EXE Execution Patterns (e32f92d1-523e-49c3-9374-bdb13b46a3ba) | Sigma-Rules | 1 |