Suspicious Unsigned Thor Scanner Execution (ea5c131b-380d-49f9-aeb3-920694da4d4b)

Detects loading and execution of an unsigned thor scanner binary.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Suspicious Unsigned Thor Scanner Execution (ea5c131b-380d-49f9-aeb3-920694da4d4b)	Sigma-Rules	DLL - T1574.001 (2fee9321-3e71-4cf4-af24-d4d40d355b34)	Attack Pattern	1
Hijack Execution Flow - T1574 (aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6)	Attack Pattern	DLL - T1574.001 (2fee9321-3e71-4cf4-af24-d4d40d355b34)	Attack Pattern	2