Detects attempts to modify the registry using VBScript's CreateObject ("Wscript.shell") and RegWrite methods via common LOLBINs. It could be an attempt to modify the registry for persistence without ...

The domain and IP addresses involved do not appear in any previously documented incidents, and the malware does not share any code similarities with previously known malicious software. Since this ...