HEAVYGRAM DLL Sideloading via MicDriver.exe Loading MicDriver.dll

Ibrahim Saud@tektrix

•updated 22 days ago•0•0•1

This rule detects the loading of a module named 'MicDriver.dll' or the execution of a process named 'MicDriver.exe'. These filenames are potentially indicative of malicious activity using masquerading or attempts to hijack execution flow using filenames that resemble legitimate audio drivers.