Potential KamiKakaBot Activity - Lure Document Execution — Detection Rule
Detects the execution of a Word document via the WinWord Start Menu shortcut. This behavior was observed being used by KamiKakaBot samples in order to initiate the 2nd stage of the infection.