mediumtestEmerging Threat
Potential APT-C-12 BlueMushroom DLL Load Activity Via Regsvr32
Detects potential BlueMushroom DLL loading activity via regsvr32 from AppData Local
windowsprocess_creation
2023-03-29
APC C 12 is tracked here as a threat actor, intrusion set, or campaign with 1 Sigma detection spanning 2019. Coverage centers on windows / process_creation.
Detects potential BlueMushroom DLL loading activity via regsvr32 from AppData Local