Execution of syncobs.exe Loader (PhantomPulse RAT)
Detects the execution of 'syncobs.exe', which is identified as the primary loader component for the PhantomPulse RAT. This loader is responsible for decrypting and reflectively loading the final RAT payload. The detection focuses on the specific filename, which is considered highly indicative of this threat.
CQL
