hightestEmerging Threat
Malware Shellcode in Verclsid Target Process
Detects a process access to verclsid.exe that injects shellcode from a Microsoft Office application / VBA macro
windowsprocess_access
2021-11-27
Hancitor is tracked here as a malware family or toolset with 1 Sigma detection spanning 2017. Coverage centers on windows / process_access.
Detects a process access to verclsid.exe that injects shellcode from a Microsoft Office application / VBA macro