Equation Group DLL_U Export Function Load
Detects the execution of a process with command-line arguments containing '-export dll_u' or ending with ',dll_u' or ' dll_u'. This specific export function name 'dll_u' is known to be used by tools associated with the Equation Group, indicating potential malicious activity related to their implants or frameworks.
Sigma
