SEKOIA.IO unknown stable yara

stealer_win_demotryspy [yara_rules]

View Source

Detection Logic

uint16be(0) == 0x4d5a and (1 of ($demotry*) or all of ($wide*))

Field Validations

Loading…

Comments (0)

Loading comments...