SEKOIA.IO unknown stable yara

apt_ta410_flowcloud_loader [yara_rules]

Detects FlowCloud Loader

View Source

Detection Logic

uint16be(0) == 0x4d5a and filesize < 4MB and 2 of them

Field Validations

Loading…

Comments (0)

Loading comments...