Registry Run key persistence for MiniJunk backdoor
Detects the creation of new registry values under the HKEY_CURRENT_USER or HKEY_LOCAL_MACHINE 'Run' keys. This behavior is indicative of malware persistence mechanisms, specifically observed in the context of UNC1549 MiniJunk campaigns following initial payload execution.
YARA-L
