Diaoyu Loader Execution Pattern
Detects the execution of the Diaoyu Loader, which performs a sandbox evasion check by verifying the existence of a 'pic1.png' file in its execution directory. This behavior is associated with the TGR-STA-1030 threat group.
YARA-L
