SEKOIA.IO unknown stable yara

apt_apt28_powershell_ntlm_stealer [yara_rules]

Detects the NTLM Stealer used by APT28 against UA energy sector

View Source

Detection Logic

3 of them and filesize < 4000

Field Validations

Loading…

Comments (0)

Loading comments...