SEKOIA.IO unknown stable yara

apt_apt10_hui_loader [yara_rules]

Specific string for HUI Loader

View Source

Detection Logic

(uint16be(0) == 0x4d5a) 
        and filesize > 30KB and filesize < 100KB
        and 1 of them

Field Validations

Loading…

Comments (0)

Loading comments...