Ousaban Registry Persistence via Financeiro Run Key
Detects the creation of a registry run key named 'Financeiro' under the CurrentVersion\Run path, which is associated with the Ousaban malware. This detection identifies instances where the 'Financeiro' run key is created in the Windows registry, which may indicate a compromise or malicious activity related to Ousaban malware persistence.
Sigma
