Dohdoor Sideloading via LOLBin in Staging Directory
Detects the execution of legitimate Windows binaries from non-standard public or program data directories. This technique is used by the Dohdoor malware to sideload a malicious DLL.
Sigma
Detects the execution of legitimate Windows binaries from non-standard public or program data directories. This technique is used by the Dohdoor malware to sideload a malicious DLL.
Already have an account?