CmdID

CmdID / Techniques / T1204

T1204.004 User Execution: Malicious Copy and Paste

An adversary may rely upon a user copying and pasting code in order to gain execution. MITRE ATT&CK

3 Sigma rules T1204.004 on attack.mitre.org

Part of

MITRE ATT&CK
T1204User Execution

Sigma rules tagged with it

process creation, the highest levels first
highSuspicious ClickFix/FileFix Execution Patternmontysecurity, Swachchhanda Shrawan Poudel (Nextron Systems) · Windows
highSuspicious Explorer Process with Whitespace Padding - ClickFix/FileFixSwachchhanda Shrawan Poudel (Nextron Systems) · Windows
highSuspicious FileFix Execution Pattern0xFustang, Swachchhanda Shrawan Poudel (Nextron Systems) · Windows