ByteCode MSIL Backdoor NjRAT Detection

This rule detects the NjRAT backdoor, a remote access Trojan (RAT). It identifies two main versions of the malware based on distinct byte patterns related to persistence mechanisms, command and control (connect, send, receive) functionalities, and system information gathering. The rule looks for specific sequences of bytecode instructions indicative of NjRAT's operational logic.