PNG Steganographic Image Containing Embedded ZIP Archive (Ousaban)
Detects PNG image files that contain an embedded ZIP archive appended after the IEND chunk. This technique is commonly associated with Ousaban malware, which uses steganography to conceal malicious payloads (such as an executable named 'SysMain.exe') within image files to evade detection during delivery.
YARA
