Potential Toshdpapi.DLL Sideloading

Rule Info

Name
Potential Toshdpapi.DLL Sideloading
Author
MalGamy (Nextron System)
Description
Detects potential DLL sideloading of "toshdpapi.dll"
Reference
https://www.security.com/threat-intelligence/chinese-espionage-ransomware
Date
2025-02-18 00:00:00
Modified
None
Id
60968738-206d-4e68-84fb-190fe1f38c01
Tags
attack.defense-evasion attack.privilege-escalation attack.t1574.001 attack.t1574.002
Type
Nextron Sigma feed only (private)

Rule History

THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022