SEKOIA.IO unknown stable yara

hacktool_mimilite [yara_rules]

Detects Mimilite

View Source

Detection Logic

uint16be(0) == 0x4d5a and
        filesize < 200KB and
        all of ($imp*) and $chunk

Field Validations

Loading…

Comments (0)

Loading comments...