ReversingLabs unknown stable yara

Win32_Ransomware_Atlas [ransomware]

Yara rule that detects Atlas ransomware.

View Source

Detection Logic

uint16(0) == 0x5A4D and $encrypt_files and $remote_server_1 and $remote_server_2 and
        $send_post_packet and $send_get_request

Field Validations

Loading…

Comments (0)

Loading comments...