APT28 Phantom Net Voxel Steganography Loader
Detects the loading of a malicious DLL by explorer.exe. This DLL is responsible for extracting a shellcode payload from a PNG file using steganography, a technique observed in the APT28 Phantom Net Voxel campaign.
Sigma
