Potential BlueMushroom DLL Load Activity Via Regsvr32
Detects potential BlueMushroom DLL loading activity via regsvr32 from the AppData Local directory. This technique is often used for defense evasion and execution of malicious code.
Sigma
Detects potential BlueMushroom DLL loading activity via regsvr32 from the AppData Local directory. This technique is often used for defense evasion and execution of malicious code.
Already have an account?