Moriya Rootkit - System (25b9c01c-350d-4b95-bed1-836d04a4f324)

Detects the use of Moriya rootkit as described in the securelist's Operation TunnelSnake report

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Windows Service - T1543.003 (2959d63f-73fd-46a1-abd2-109d7dcede32)	Attack Pattern	Moriya Rootkit - System (25b9c01c-350d-4b95-bed1-836d04a4f324)	Sigma-Rules	1
Windows Service - T1543.003 (2959d63f-73fd-46a1-abd2-109d7dcede32)	Attack Pattern	Create or Modify System Process - T1543 (106c0cf6-bf73-4601-9aa8-0945c2715ec5)	Attack Pattern	2