VjW0rm

 1title: VjW0rm
 2status: experimental
 3description: VjW0rm Registry key
 4author: Joe Security
 5date: 2022-08-30
 6id: 200104
 7threatname: VjW0rm
 8behaviorgroup: 2
 9classification: 4
10mitreattack:
11
12logsource:
13    product: windows
14    category: registry_event
15detection:
16    selection:
17        EventID: 13
18        TargetObject:
19            - '*HKEY_CURRENT_USER\vjw0rm*'
20    condition: selection
21level: critical