All Detections

Rundll32 Execution of Lampion RAT via jangadeiro Export from AppData

avatar
Luís Marques@remotecodeexecution
updated today000

Detects when rundll32 runs with the "jangadeiro" argument from the AppData directory.

Sigma