Qakbot Rundll32 Fake DLL Extension Execution

심각도 치명 Sigma 탐지 룰. Detects specific process tree behavior of a "rundll32" execution where the DLL doesn't have the ".dll" extension. This is often linked with …

작성자: X__Junior (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본