Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\YandexBrowser_setup · registry key · cyfar.ca
indicator
registry_key
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\YandexBrowser_setup
copy defanged
copy refanged (live)
First seen
2026-05-22
Last seen
2026-05-22
Sightings
1
Posts referencing this indicator
Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload
K
Kaspersky
Registry run key used for persistence by the fixed.ps1 loader.
2026-05-22
