SEKOIA.IO unknown stable yara

apt_apt33_falsefont [yara_rules]

FalseFont backdoor

View Source

Detection Logic

uint16be(0) == 0x4d5a and 15 of ($command*) and 3 of ($s*)

Field Validations

Loading…

Comments (0)

Loading comments...