Suspicious Unsigned Thor Scanner Execution (ea5c131b-380d-49f9-aeb3-920694da4d4b)

Detects loading and execution of an unsigned thor scanner binary.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
DLL Side-Loading - T1574.002 (e64c62cf-9cd7-4a14-94ec-cdaac43ab44b)	Attack Pattern	Suspicious Unsigned Thor Scanner Execution (ea5c131b-380d-49f9-aeb3-920694da4d4b)	Sigma-Rules	1
DLL Side-Loading - T1574.002 (e64c62cf-9cd7-4a14-94ec-cdaac43ab44b)	Attack Pattern	Hijack Execution Flow - T1574 (aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6)	Attack Pattern	2