SEKOIA.IO unknown stable yara

implant_mac_smoothoperator_update_agent [yara_rules]

UpdateAgent payload delivered by SmoothOperator during the 3CX supply chain attack

View Source

Detection Logic

uint32be(0)==0xcffaedfe and 2 of them

Field Validations

Loading…

Comments (0)

Loading comments...