ReversingLabs unknown stable yara

Linux_Virus_Vit [virus]

Yara rule that detects Vit virus.

View Source

Detection Logic

uint32(0) == 0x464C457F and $vit_entry_point at elf.entry_point and $vit_str

Field Validations

Loading…

Comments (0)

Loading comments...