Suspicious Rundll32 Execution With Image Extension — Detection Rule

Detects the execution of Rundll32.exe with DLL files masquerading as image files

Read the full analysis on IntelFusions