SEKOIA.IO unknown stable yara

infostealer_win_lighting [yara_rules]

Detect the Lighting infostealer based on specific strings

View Source

Detection Logic

uint16(0)==0x5A4D and
        6 of ($str*) and all of ($dll*) and 10 of ($app*)

Field Validations

Loading…

Comments (0)

Loading comments...