Nimbus RAT Lockfile Creation
Detects the creation of the java_app.lock file in the Windows temporary directory, which serves as a single-instance lock file for the Nimbus RAT.
Sigma

Detects the creation of the java_app.lock file in the Windows temporary directory, which serves as a single-instance lock file for the Nimbus RAT.

Already have an account?