Execution of trojanized 7-Zip proxyware payload hero.exe/uphero.exe from SysWOW64
Detects execution of a trojanized 7-Zip proxyware payload (hero.exe/uphero.exe) from the SysWOW64 directory. This malware is known to be used in targeted attacks and can lead to unauthorized access and data exfiltration.
Sigma
