Supper SOCKS5 Backdoor Obfuscation
Detects the execution of the Supper SOCKS5 backdoor, used by the Vanilla Tempest threat actor, based on a unique command-line pattern involving DllRegisterServer and a .ULB file, which acts as a loader for the obfuscated payload.
YARA-L
