Signature Base unknown stable yara

Ammyy_Admin_AA_v3 [yara]

Remote Admin Tool used by APT group Anunak (ru) - file AA_v3.4.exe and AA_v3.5.exe

View Source

Detection Logic

2 of ($x*) or all of ($s*)

Field Validations

Loading…

Comments (0)

Loading comments...