OnyxC2 Malicious DLL Side-Loading (borlndmm.dll)
Detects the loading of 'borlndmm.dll' from unusual directories, an activity associated with OnyxC2 stealer DLL side-loading techniques, where the malicious DLL is typically inflated via binary padding to evade detection.
Sigma
