SEKOIA.IO unknown stable yara

infostealer_win_blustealer [yara_rules]

Detect the BluStealer infostealer based on characteristic strings

View Source

Detection Logic

uint16(0)==0x5A4D and 2 of ($cha*) and 4 of ($str*) and $key_0

Field Validations

Loading…

Comments (0)

Loading comments...