Arbitrary Binary Execution Using GUP Utility
Detects the execution of arbitrary binaries or commands by leveraging the Notepad++ updater (gup.exe). This technique can be used by adversaries to bypass application whitelisting or execute malicious code under the guise of a legitimate process.
Sigma
