ReversingLabs unknown stable yara

Win32_Ransomware_Alcatraz [ransomware]

Yara rule that detects Alcatraz ransomware.

View Source

Detection Logic

uint16(0) == 0x5A4D and $encrypt_files and $remote_server and $remote_server_2

Field Validations

Loading…

Comments (0)

Loading comments...