Stealer/1.0 Persistence via Startup Folder Executable Drop
Detects the creation of an executable file named 'stealer.exe' within the Windows Startup folder. This activity is indicative of the Stealer/1.0 malware establishing persistence, ensuring execution upon user logon.
Sigma
