SEKOIA.IO unknown stable yara

apt_evasive_panda_downloader_certificate_exe [yara_rules]

Detects downloader used by Evasive Panda (certificate.exe)

View Source

Detection Logic

uint16be(0) == 0x4d5a and all of them

Field Validations

Loading…

Comments (0)

Loading comments...