• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Red Lamassu JFMBackdoor: fltMC.exe DLL Side-Load from Temp Directory

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Ibrahim Saud@tektrix
    •updated Jun 30, 2026•0•0•0

    Detects execution of fltMC.exe when located in the Temp directory, or execution of processes matching known malicious file hashes associated with this filename.

    CQL

    Tags

    T1036 - MasqueradingTA0005 - Defense EvasionProcess CreationFile Executable DetectedWindowsCrowdstrike Falcon EDR

    Found in

    • Red Lamassu Deploying JFMBackdoor Against Asia-Pacific TelecommunicationsLast updated May 26, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?