Red Lamassu JFMBackdoor: fltMC.exe DLL Side-Load from Temp Directory
Detects execution of fltMC.exe when located in the Temp directory, or execution of processes matching known malicious file hashes associated with this filename.
CQL

Detects execution of fltMC.exe when located in the Temp directory, or execution of processes matching known malicious file hashes associated with this filename.

Already have an account?