SEKOIA.IO unknown stable yara

ransomware_win_eking_rich_header [yara_rules]

Detect Eking ransomware using its rich header

View Source

Detection Logic

hash.md5(pe.rich_signature.clear_data) == "256b60751602028612562b73ecdb163c"

Field Validations

Loading…

Comments (0)

Loading comments...