All Detections

Renamed Gpg.EXE Execution

avatar
SigmaHQ Detections@sigmaHQ
updated Aug 12, 2024000

Detects the execution of a renamed "gpg.exe". Often used by ransomware and loaders to decrypt/encrypt data.

Sigma