SEKOIA.IO unknown stable yara

infostealer_win_vidar_str_jul22 [yara_rules]

Detect the Vidar infostealer based on specific strings

View Source

Detection Logic

uint16(0)==0x5A4D and (7 of them or $opc)

Field Validations

Loading…

Comments (0)

Loading comments...