Signature Base unknown stable yara

APT28_HospitalityMalware_mvtband_file [yara]

Yara Rule for mvtband.dll malware

View Source

Detection Logic

all of them and pe.sections[2].raw_data_size == 0

Field Validations

Loading…

Comments (0)

Loading comments...