Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "APC-C-12"

3,731Total
3,132Detection
457Emerging
139Hunting
Emerging Threatmediumtest

Potential APT-C-12 BlueMushroom DLL Load Activity Via Regsvr32

Detects potential BlueMushroom DLL loading activity via regsvr32 from AppData Local

WindowsProcess Creation
Florian Roth (Nextron Systems)+2Wed Oct 022019