==================================================

CREATED: WIN-ORANGEWORM-DLL-CLI (#1961)

Description

This detector identifies instances of rundll32.exe executing with command line options indicating a Kwampirs infection.

ATT&CK Technique T1085

Did this answer your question?