indicatorregistry_key
HKU\S-1-5-21-[REDACTED]-500\Software\Microsoft\Windows\CurrentVersion\Run\9Er6IIp
- First seen
- 2026-07-02
- Last seen
- 2026-07-02
- Sightings
- 1
Posts referencing this indicator
- Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects
ClipBanker persistence registry Run key with randomized value name '9Er6IIp', pointing to malware executable in Administrator's Saved Games folder.