China Apt DLL Sideloading Vetysafe
Detects the DLL sideloading of sbamres.dll by the legitimate VipreAV component vetysafe.exe. This technique has been associated with China-linked threat actors like Space Pirates, Kelp (Salt Typhoon), and APT41 subgroups.
YARA-L
