Suspicious Double Extension Files

SigmaHQ Detections@sigmaHQ

•updated 13 days ago•2•0•6

Detects dropped files with double extensions, which is often used by malware as a method to abuse the fact that Windows hide default extensions by default.