SEKOIA.IO unknown stable yara

rootkit_diamorphine_strings [yara_rules]

Detects Diamorphine linux rootkit based on strings

View Source

Detection Logic

uint32be(0) == 0x7f454c46 and all of them

Field Validations

Loading…

Comments (0)

Loading comments...