Lazarus FlashHole rogue mscoree.dll sideload followed by GitHub activity

ills3c Intel&Coffee@Ills3C

•updated today•0•0•1

Detects potential DLL sideloading of mscoree.dll outside of standard system and .NET paths, followed closely by network activity connecting to GitHub from the same process within a one-hour window.