SEKOIA.IO unknown stable yara

malicious_lnk_exploiting_webdav_share_generic [yara_rules]

Detects some malicious LNK

View Source

Detection Logic

uint32be(0) == 0x4c000000 and
        2 of them

Field Validations

Loading…

Comments (0)

Loading comments...