DarkCloud Stealer - AutoIt Dropper File Creation
Detects the creation of files associated with the DarkCloud Stealer dropper stage, which is an AutoIt compiled executable, as described in the linked CTI. The AutoIt script uses FileInstall() to drop these files before executing shellcode.
Sigma
