Potential COLDSTEEL RAT File Indicator - dllhost.exe in Public Documents
Detects the creation of a file named "dllhost.exe" in the "C:\users\public\Documents\" directory, which has been observed as an indicator for the COLDSTEEL RAT malware.
Sigma
Detects the creation of a file named "dllhost.exe" in the "C:\users\public\Documents\" directory, which has been observed as an indicator for the COLDSTEEL RAT malware.
Already have an account?