DDE-CmdPowershell

ATP Sandbox Adv. HeuristicsAV

Description

DDE-CmdPowershell is a detection name for malicious Office documents using DDE to execute PowerShell commands.

Stats

First seen: July 2022
Last seen: October 2026

Alert name variants

Alert Name	Engine
Exploit.DDE-CmdPowershell.Gen	ATP Sandbox Adv. HeuristicsAV